Find and stop email forward rule - Exch2010SP3

Posted on 2014-08-12
Last Modified: 2014-08-12
So I have some user who is apparently tying to forward emails sent to him to an outside account.. I have confronted both of my domain users that have a matching address prefix.  They both deny and say they've never seen that domain in this email address before.

It mainly occurs when HR send out emails to the masses (company-wide DL), so of course they're griping about it now.  I need to find and stop it.  Any pro tips?
Question by:Ben Hart
    LVL 35

    Assisted Solution

    Sadly, it's probably a local rule, which means you have to sit behind the PC of that user while he has logged in to be able to check. If not, it will always be guess work. Of course, the guess work is accurate if you check the timing of the mails, if there are just a few seconds between HR sending that email and the forwarded email, it's definitely a rule from a user. With local rules, you can't "fake" headers though, if you check the log files, the REAL user will be revealed.
    LVL 41

    Accepted Solution

    Go and disable auto forward option from Exchange end. How to do it:
    LVL 14

    Author Comment

    by:Ben Hart
    Thanks for the help guys, especially the link to that Auto Forward option.  I found an incorrect account added to one of our main site distribution lists.  It was a vendor that matched the external email address of the mysterious bounced messages.  The username was VERY close to an actual domain user so I think someone mistakenly added the wrong account to this DL.

    Featured Post

    Want to promote your upcoming event?

    Attending an event? Speaking at a conference? Or exhibiting at a tradeshow? Easily inform your contacts by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

    Join & Write a Comment

    Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
    Outlook Free & Paid Tools
    In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
    The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now