troubleshooting Question

Hidden or Corrupted inbox rule on office 365! Is that possible?

Avatar of Farnam Shadmani
Farnam Shadmani asked on
ExchangeMicrosoft 365
3 Comments2 Solutions3116 ViewsLast Modified:
Hi All,

I am having some strange issues with one of our users.
Every time  User (A) receives an invite, 4 other users (Bs) receive her invites too.  3 of whom have already separated from the company, and don't haven any account on our server anymore.

We use office 365, Online Exchange plans. Here is what I've already looked at:

- Check for any inbox rule and delegates via Online Dashboard - There was none
- Checked for delegation on Calendar and Inbox via powershell, found exact 4 other users (B) delegated to user A inbox.
- Remove all 4 user Bs.  
- Check for delegation again, and there is none.

And still invites are being forwarded to other 4 user Bs.

- Checked for Inbox rules via sower-shell, and there is none.

Looking at the header of invite there seems to be some sort of inbox rules taking place, but we can't find it anywhere.

Invite' email header:
Received: from ( by ( with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id via Mailbox Transport; Thu, 16 Mar 2017 20:55:15 +0000
Received: from ( by ( with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id; Thu, 16 Mar 2017 20:55:13 +0000
Received: from ([]) by ([]) with Microsoft
 SMTP Server id; Thu, 16 Mar 2017 20:55:13 +0000
From: Me <>
      USER_B4 <>
Subject: Test 2
Thread-Topic: Test 2
Thread-Index: AdKel5phP3XMVD0KqVKe2MIWJ3dg==
Date: Thu, 16 Mar 2017 13:55:12 -0700
Message-ID: <>
Accept-Language: en-US
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Internal
X-MS-Exchange-Organization-AuthMechanism: 04
X-Auto-Response-Suppress: All
X-MS-Exchange-Organization-Network-Message-Id: 56df91d8-b401-4b5a-9704-08d46caebe0c
X-MS-Exchange-Organization-SCL: -1

x-originating-ip: []
authentication-results:; dkim=none (message not signed)
 header.d=none;; dmarc=none action=none;
auto-submitted: auto-generated
x-forefront-antispam-report: SFV:SKI;SFS:;DIR:INB;SFP:;SCL:-1;SYRH:BN6PR04MB0613;;FPR:;SPF:None;LANG:en;SFV:SKI;SFS:;DIR:INB;SFP:;SCL:-1;SRVR:CY1PR04B2283;;FPR:;SPF:None;LANG:en;;SKIP:1;
X-Microsoft-Exchange-Diagnostics: 1;BN3PR04MB2273;27:AjdhrSIDBHzWglfFY7wp8EuEjx0atHy6Ip5ZfPaW/Zi8+FhJ3dCqayUmUlb2cBdFzMNlcF/PC31m1lVMypwwzAFkrld80OchmWY7gYu2VRCr10wSZu3zpd8lJbZ3cHCxTs75rlUe4GeUBrzPuFQ==
Content-Type: multipart/alternativ
MIME-Version: 1

What else should I look into? Any thoughts?
Join our community to see this answer!
Unlock 2 Answers and 3 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 3 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros