Solved

Finding who sent messages to a user who's mailbox was full in Exchange 2007

Posted on 2014-11-21
5
19 Views
Last Modified: 2016-07-17
Hi so I'm trying to find a list of people that emailed a user when there mail box was full.  I found internally using  the microsoft exchange trouble shooting assistant message tracking .  Setting sender as Microsoft Exchange account and looking for failed messages there were very few.  But when the sender is postmaster there are a lot more messages and since I can't actually see the messages I don't know if post master is sending the message because that user's mailbox was full.  I know this is a really particular request but I think it would be useful for others as well.  I'm wondering if there's a unique failure for mailbox full I can search for.  I think as I'm writing this I may have figured it out but now to dump this to txt that the user could use like excel or csv.  Basically search I used was recipient and fail.  Anyone know how to do this in powershell and export list to a file.

Thanks!!
0
Comment
Question by:Strider10
  • 2
5 Comments
 
LVL 26

Accepted Solution

by:
Nick67 earned 500 total points
ID: 40458775
Looks like it should be pretty simple.
The message tracking tool shows what PowerShell commands are being issued.
Tracking fails for 'someone@somewhere.com for the last week is this
get-messagetrackinglog -Recipients:someone@somewhere.com -EventID "FAIL" -Start "11/17/2014 4:32:00 PM" -End "11/21/2014 4:42:00 PM"

From this site
http://blogs.technet.com/b/heyscriptingguy/archive/2014/02/04/use-powershell-to-create-csv-file-to-open-in-excel.aspx

It looks like we could append this bit
| Export-Csv -Path c:\someValidPath\file.csv -Encoding ascii -NoTypeInformation
to get the Exchange Management Shell to pipe the results out to a csv

Note that you CAN'T do this straight up from the command line's PowerShell.
You have to fire up the Exchange Management Shell or the right cmdlets won't be available

I tested this on my Exchange 2007 /SBS 2008 box.
C:\Windows\system32>get-messagetrackinglog -Recipients:me@myoutfit.co
m
-EventID "RECEIVE" -Start "11/17/2014 4:32:00 PM" -End "11/21/2014 4:42:00 PM"
 | Export-Csv -Path C:\Users\myname\Desktop\test.csv -Encoding ascii -NoTypeI
nformation

Worked like a hot damn!
I got a CSV of all my RECEIVE items on my desktop
0
 

Author Comment

by:Strider10
ID: 40458850
Thank you Nick67 for the fast response!  I'm definitely using the CSV output on many more of my powershell scripts I've wanted to look into that for a while just never took the time.  Thanks so much!
0
 
LVL 26

Expert Comment

by:Nick67
ID: 41714682
Not to be a PITA, but I believed this was answered
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Phishing attempts can come in all forms, shapes and sizes. No matter how familiar you think you are with them, always remember to take extra precaution when opening an email with attachments or links.
Preparing an email is something we should all take special care with – especially when the email is for somebody you may not know very well. The pressures of everyday working life stacked with a hectic office environment can make this a real challen…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question