Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Some help on Exchange 2007 and message tracking

Posted on 2013-05-31
3
Medium Priority
?
179 Views
Last Modified: 2013-07-10
I had a user that reported she "didn't send" a particular email.  I can confirm it isn't in her sent email folder.  When I did the tracking on it, I found the email in the logs, and it shows all the same information as the email in question.  My question is how do I actually read the body of it and the attachment, not just the statistical information?
0
Comment
Question by:tsaico
  • 2
3 Comments
 
LVL 4

Expert Comment

by:Jeffery Hayes
ID: 39211497
Look at the message header for the mailbox the message was revived in.

In message tracking the only real thing you might notice is the IP address.

However if you look at the message header you can quickly see were the message was sent from along with who actually sent the message.

If possible can you provide the message header as I'll happy review it and let you know what I think occurred.

So far what it sounds like happen is that the message might have been spoofed which is really common.

As your want to look at both the following values..

Return-Path:
From:

Most times with spoofing one of these values won't be the same.
0
 
LVL 9

Accepted Solution

by:
tsaico earned 0 total points
ID: 39302806
I had turned on journaling for that specific user.  It turned out she had written a rule to auto send emails when a certain condition applied, but didn't finish writing the rule, thinking it was a "draft" kind of thing that wouldn't be in effect.
0
 
LVL 9

Author Closing Comment

by:tsaico
ID: 39313559
While good advice, turned out it was a rule that was forwarding the email, and a other that was autodelting when she sends emails to herself.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With so many activities to perform, Exchange administrators are always busy in organizations. If everything, including Exchange Servers, Outlook clients, and Office 365 accounts work without any issues, they can sit and relax. But unfortunately, it…
Mailbox Corruption is a nightmare every Exchange DBA wishes he never has. Recovering from it can be super-hectic if not entirely futile. And though techniques like the New-MailboxRepairRequest cmdlet have been designed to help with fixing minor corr…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

886 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question