skbarnard
asked on
Outlook meeting invites running amuck
I have an unusual situation where a meeting invitation is getting blasted out by a bunch of people.
To try and explain, I work for a school district and we have a distribution list for just the district office staff. The invitation to this meeting was sent out originally by the superintendent's assistant for October 11, 2013 to the district office staff distribution list.
Now what's happening is several other accounts have been sending that same invitation but then immediately after receiving the invitation, I receive up to 14 meeting cancellations (for that same meeting). One of the people the invitation came from is a teacher and not even on the district office DL.
Another strange thing is when I receive the meeting invitation it states the meeting is in the past but how can a meeting in October of this year be in the past?
I've scanned our email servers with a Malware program and one malicious item was found on both email nodes. That has been cleaned.
I've scanned with MS Forefront (not Forefront for Exchange) I don't know how effective that is since it's set to not scan the exchange databases - the scan found nothing.
Has anyone else experienced anything like this? Does anyone have any tips or ideas of things to do?
To try and explain, I work for a school district and we have a distribution list for just the district office staff. The invitation to this meeting was sent out originally by the superintendent's assistant for October 11, 2013 to the district office staff distribution list.
Now what's happening is several other accounts have been sending that same invitation but then immediately after receiving the invitation, I receive up to 14 meeting cancellations (for that same meeting). One of the people the invitation came from is a teacher and not even on the district office DL.
Another strange thing is when I receive the meeting invitation it states the meeting is in the past but how can a meeting in October of this year be in the past?
I've scanned our email servers with a Malware program and one malicious item was found on both email nodes. That has been cleaned.
I've scanned with MS Forefront (not Forefront for Exchange) I don't know how effective that is since it's set to not scan the exchange databases - the scan found nothing.
Has anyone else experienced anything like this? Does anyone have any tips or ideas of things to do?
Rick Hobbs
What was the malicious item that was found?
Outlook and Exchange version?
I bet there is an iOS device in the mix somewhere, that hasn't been updated.
Simon.
Simon.
You may have to test this again, so hopefully people won't be too annoyed. If you expand the list before you send the meeting, do you see anyone unexpected in the names? Is there any chance one of the invitees has a delegate set up to receive their mail?
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
Sounds like you may have found something there. I have seen that happen before with a previous mailbox that was deleted. Some of the DLs where that mailbox was a member started acting in the way you describe. That was why I was wondering what happened if you sent to individuals instead of the group.
Let us know how it goes.
Let us know how it goes.
SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
You cannot convert groups from static to dynamic, so a new group would have to be created.
Simon.
Simon.
ASKER
I tried creating the dynamic group but no users get populated. I can do a query in Exchange (in the saved queries area) and get a list of the people that should populate into the list (using the same criteria) so do you have any idea why the people don't get added when I'm creating the dynamic list?
I'm using Powershell - here's the command:
New-DynamicDistributionGro
-RecipientFilter {(RecipientType -eq 'UserMailbox') -and (UserAccountControl -ne 514)
-and (criteria used to populate list)}
The criteria is Notes -like '*DO*'. The list gets populated with 2 users, neither of which should be on the list but because there is a word with DO in the notes area, they are added to this list. I've tried using Notes -eq 'DO' but nothing gets populated at all. We actually do use the notes area to make account notations so I'm sure that's why it doesn't work with the -eq option.
I'm using Powershell - here's the command:
New-DynamicDistributionGro
-RecipientFilter {(RecipientType -eq 'UserMailbox') -and (UserAccountControl -ne 514)
-and (criteria used to populate list)}
The criteria is Notes -like '*DO*'. The list gets populated with 2 users, neither of which should be on the list but because there is a word with DO in the notes area, they are added to this list. I've tried using Notes -eq 'DO' but nothing gets populated at all. We actually do use the notes area to make account notations so I'm sure that's why it doesn't work with the -eq option.
I can't help with Dynamic DL queries as I don't use them for any reason whatsoever. My preference is static groups - usually security groups so I can use them for permissions as well.
Simon.
Simon.
ASKER
I needed to keep working on this to mitigate the invitation blasts so my solutions ended up resolving our issue.
I'll open a new thread regarding the dynamic distribution list issue.
I'll open a new thread regarding the dynamic distribution list issue.