Solved

Some help on Exchange 2007 and message tracking

Posted on 2013-05-31
3
175 Views
Last Modified: 2013-07-10
I had a user that reported she "didn't send" a particular email.  I can confirm it isn't in her sent email folder.  When I did the tracking on it, I found the email in the logs, and it shows all the same information as the email in question.  My question is how do I actually read the body of it and the attachment, not just the statistical information?
0
Comment
Question by:tsaico
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 4

Expert Comment

by:Jeffery Hayes
ID: 39211497
Look at the message header for the mailbox the message was revived in.

In message tracking the only real thing you might notice is the IP address.

However if you look at the message header you can quickly see were the message was sent from along with who actually sent the message.

If possible can you provide the message header as I'll happy review it and let you know what I think occurred.

So far what it sounds like happen is that the message might have been spoofed which is really common.

As your want to look at both the following values..

Return-Path:
From:

Most times with spoofing one of these values won't be the same.
0
 
LVL 9

Accepted Solution

by:
tsaico earned 0 total points
ID: 39302806
I had turned on journaling for that specific user.  It turned out she had written a rule to auto send emails when a certain condition applied, but didn't finish writing the rule, thinking it was a "draft" kind of thing that wouldn't be in effect.
0
 
LVL 9

Author Closing Comment

by:tsaico
ID: 39313559
While good advice, turned out it was a rule that was forwarding the email, and a other that was autodelting when she sends emails to herself.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Read this checklist to learn more about the 15 things you should never include in an email signature.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses
Course of the Month4 days, 21 hours left to enroll

635 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question