Message Tracking in Exchange

I need some help with tracking messages in Exchange 2010/Oultook.

Basically I need to be able to search a mailbox of one of our users to see when they received an email with a specific subject line (use of wildcard preferred) and then also show me the name of their Outlok mail subfolder that the email resides in currently (inbox or subfolder...)

Can this be done?
snyperjAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Adam BrownSr Solutions ArchitectCommented:
There are a couple of ways you can do the email search, but the only way to really tell which folder it's in is to grant yourself full access to the mailbox, open in Outlook, then run the search from there. Once you find the email, highlight it and hit Alt+Enter. A window will pop up showing the message properties and the folder will be shown in "Location"
0
snyperjAuthor Commented:
Well I just figured out something else on this.  When I ran a delivery report  from the 'Toolbox' in Exchange 2010, searching on both the users mailbox and the from address of the sender, I see that the emails are coming in.  However, when I click the one of the items in the search results and look at the detail, it says
Failed
8/3/2015 8:52 AM
This message wasn't delivered because it conflcts with an organization policy.


Where to look?  All of our users receive this email (it is a daily spam filter report of items that were quarantined)..but for some reason it wont deliver to this user, even though it is being sent to him.

What type of organizational policy could cause this (we have 100's of users who receive this email without issue.)

Any pointers to a place to start looking would be appreciated.  Thanks!
0
Adam BrownSr Solutions ArchitectCommented:
If he gets a really long spam report, it's possible the message went over your size limits, but it would have to be over the size limits to do that (typical is 25MB). It may also be blocked by the content filter in Exchange if you have it enabled. If you have a Spam filter, the content filter for Exchange is unnecessary and can cause stuff like this.
0
snyperjAuthor Commented:
Where is the content filter in Exchange?  Is that the same as the Hub Transport rules?
0
Adam BrownSr Solutions ArchitectCommented:
There may be some transport rules that are blocking things, but the Content filter is separate from that. If the anti-spam agents have been installed, there should be an additional tab for Anti-Spam on the Organization Management>hub transport node in EMC. If there is no Anti-Spam tab, then the content filter isn't installed and not causing your problem. If it *is* there, you should be safe to disable it everything in the tab.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.