Solved

Exchange 2010 ScanMail Fail

Posted on 2013-06-11
3
1,830 Views
Last Modified: 2013-07-18
I have a user who sent an internal email using outlook 2007 which was processed by our exchange 2010 server.   She did not receive an error message when sending but when opening the sent item she gets the following message. " A policy violated content was detected and removed from the original mail header, subject, boty or attachment. You can safely save or delete this replacement attachment. "

I've traced the message using powershell and found the following information but I'm not sure where to go from here as I didn't find the message listed in the Agent Logs for  that time period .....  
++++++++++++++++++++++++++
PSComputerName          : exchange1.desertortho.local
RunspaceId              : 61def46d-dfa4-479d-81ee-299869729dc3
Timestamp               : 6/7/2013 11:16:54 AM
ClientIp                :
ClientHostname          : EXCHANGE1
ServerIp                :
ServerHostname          :
SourceContext           : ScanMail Routing Agent
ConnectorId             :
Source                  : AGENT
EventId                 : FAIL
InternalMessageId       : 366903
MessageId               : <EF54B011491F8341A6201379C871891606AE7FE4@EXCHANGE1.DesertOrtho.local>
Recipients              : {debi@dbjortho.com}
RecipientStatus         : {}
TotalBytes              : 16033
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : W/C charges...
Sender                  : jodic@dbjortho.com
ReturnPath              : jodic@dbjortho.com
MessageInfo             :
MessageLatency          :
MessageLatencyType      : None
EventData               :

+++++++++++++++++++++++++++++++++++++++++

We We have anti-spam turned on in exchange as well as our Trendmicro is filtering messages .......

Thanks so much for any help you can provide. ...

Joel Brown
0
Comment
Question by:jtbrown1111
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 8

Accepted Solution

by:
vSolutionsIT earned 500 total points
ID: 39239547
Confirm the contents of the emails and attachments from the user and verify if any of the custom words or attachments are configured in the scanmail to quarantine emails.
if the attachment was excel sheet then verify if it has any macro's in that case you will have to configure scanmail to allow excel sheets with macros.
0
 

Author Comment

by:jtbrown1111
ID: 39239579
@vSolutionsIT,   will do .... are you saying that scanmail belongs to exchange or trendmicro ?   thougths ..?
0
 
LVL 8

Expert Comment

by:vSolutionsIT
ID: 39335863
Scanmail belongs to Trendmicro.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses
Course of the Month11 days, 17 hours left to enroll

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question