Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Exchange 2010 ScanMail Fail

Posted on 2013-06-11
3
Medium Priority
?
1,895 Views
Last Modified: 2013-07-18
I have a user who sent an internal email using outlook 2007 which was processed by our exchange 2010 server.   She did not receive an error message when sending but when opening the sent item she gets the following message. " A policy violated content was detected and removed from the original mail header, subject, boty or attachment. You can safely save or delete this replacement attachment. "

I've traced the message using powershell and found the following information but I'm not sure where to go from here as I didn't find the message listed in the Agent Logs for  that time period .....  
++++++++++++++++++++++++++
PSComputerName          : exchange1.desertortho.local
RunspaceId              : 61def46d-dfa4-479d-81ee-299869729dc3
Timestamp               : 6/7/2013 11:16:54 AM
ClientIp                :
ClientHostname          : EXCHANGE1
ServerIp                :
ServerHostname          :
SourceContext           : ScanMail Routing Agent
ConnectorId             :
Source                  : AGENT
EventId                 : FAIL
InternalMessageId       : 366903
MessageId               : <EF54B011491F8341A6201379C871891606AE7FE4@EXCHANGE1.DesertOrtho.local>
Recipients              : {debi@dbjortho.com}
RecipientStatus         : {}
TotalBytes              : 16033
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : W/C charges...
Sender                  : jodic@dbjortho.com
ReturnPath              : jodic@dbjortho.com
MessageInfo             :
MessageLatency          :
MessageLatencyType      : None
EventData               :

+++++++++++++++++++++++++++++++++++++++++

We We have anti-spam turned on in exchange as well as our Trendmicro is filtering messages .......

Thanks so much for any help you can provide. ...

Joel Brown
0
Comment
Question by:jtbrown1111
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 8

Accepted Solution

by:
vSolutionsIT earned 1000 total points
ID: 39239547
Confirm the contents of the emails and attachments from the user and verify if any of the custom words or attachments are configured in the scanmail to quarantine emails.
if the attachment was excel sheet then verify if it has any macro's in that case you will have to configure scanmail to allow excel sheets with macros.
0
 

Author Comment

by:jtbrown1111
ID: 39239579
@vSolutionsIT,   will do .... are you saying that scanmail belongs to exchange or trendmicro ?   thougths ..?
0
 
LVL 8

Expert Comment

by:vSolutionsIT
ID: 39335863
Scanmail belongs to Trendmicro.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I don't pretend to be an expert at this, but I have found a few things that are useful. I hope that sharing them here will help others, so they will not have to face some rather hard choices. Since I felt this to be a topic of enough importance and…
Want to know how to use Exchange Server Eseutil command? Go through this article as it gives you the know-how.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
how to add IIS SMTP to handle application/Scanner relays into office 365.
Suggested Courses

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question