O G
asked on
Strange Exchange 2010 issues
Dear Exchange experts,
I am having a very strange Exchange issue. Here is a little background information. On Sunday We needed to restore an older database from our backups. After successful restore i opened the database with a third party Quest software. I had to installed Outlook (MAPI) for the software to run. We restore emails that we needed to.
On Monday several users complained that on Sunday they were getting prompted for password while working from home and Outlook would not accept password, but OWA did. When in the office, Outlook works fine.
On Tuesday i arrive to the office and i get an error message while launching Outlook saying that my mailbox was moved and i had an option use temporary mailbox or offline version. The only way to fix this was to delete the profile. Which i did.
Throughout the day i sent bunch of emails and never got responses to. Towards the end of the evening i confirmed with one user that my email from an hour ago didn't go through, when i resent it, it went through right away.
I get home, open my outlook and all mail in inbox is missing except Brand new bounce back emails from the entire day. I log into my OWA and all of my mail is there, but the bounce back emails are not. Below is an example of two bounce back emails. Any suggestions how to start troubleshooting this issue?
We are using Exchange 2010, not 365.
From: Microsoft Outlook
Sent: Tuesday, March 13, 2018 9:33 AM
To: User1
Subject: Undeliverable: RE: Sick Today
Your message couldn't be delivered to multiple recipients.
The recipients weren't found at the destination domains.
user1 Office 365 Recipients
Action Required Recipients
Unknown To address
Couldn't deliver to the following recipients:
user2@domain2.com, user3@domain1.com, User4@domain2.com
How to Fix It
The address may be misspelled or may not exist. Try one or more of the following:
• Send the message again following these steps: In Outlook, open this non-delivery report (NDR) and choose Send Again from the Report ribbon. In Outlook on the web, select this NDR, then select the link "To send this message again, click here." Then delete and retype the entire recipient address. If prompted with an Auto-Complete List suggestion don't select it. After typing the complete address, click Send.
• Contact the recipient (by phone, for example) to check that the address exists and is correct.
• The recipient may have set up email forwarding to an incorrect address. Ask them to check that any forwarding they've set up is working correctly.
• Clear the recipient Auto-Complete List in Outlook or Outlook on the web by following the steps in this article: Fix email delivery issues for error code 5.1.10 in Office 365, and then send the message again. Retype the entire recipient address before selectingSend.
If the problem continues, forward this message to your email admin. If you're an email admin, refer to the More Info for Email Adminssection below.
Was this helpful? Send feedback to Microsoft.
__________________________ __________ ____
More Info for Email Admins
Status code: 550 5.1.10
This error occurs because the sender sent a message to an email address hosted by Office 365 but the address is incorrect or doesn't exist at the destination domain. The error is reported by the recipient domain's email server, but most often it must be fixed by the person who sent the message. If the steps in the How to Fix It section above don't fix the problem, and you're the email admin for the recipient, try one or more of the following:
The email address exists and is correct - Confirm that the recipient address exists, is correct, and is accepting messages.
Synchronize your directories - If you have a hybrid environment and are using directory synchronization make sure the recipient's email address is synced correctly in both Office 365 and in your on-premises directory.
Errant forwarding rule - Check for forwarding rules that aren't behaving as expected. Forwarding can be set up by an admin via mail flow rules or mailbox forwarding address settings, or by the recipient via the Inbox Rules feature.
Recipient has a valid license - Make sure the recipient has an Office 365 license assigned to them. The recipient's email admin can use the Office 365 admin center to assign a license (Users > Active Users > select the recipient > Assigned License > Edit).
Mail flow settings and MX records are not correct - Misconfigured mail flow or MX record settings can cause this error. Check your Office 365 mail flow settings to make sure your domain and any mail flow connectors are set up correctly. Also, work with your domain registrar to make sure the MX records for your domain are configured correctly.
For more information and additional tips to fix this issue, see Fix email delivery issues for error code 5.1.10 in Office 365.
Original Message Details
Created Date: 3/13/2018 1:33:00 PM
Sender Address: user1@domain1.com
Recipient Address: user2@domain2.com, user3@domain1.com, . . .
Subject: RE: Sick Today
Error Details
Reported error: 550 5.1.10 RESOLVER.ADR.RecipientNotF ound; Recipientuser2@domain2.com not found by SMTP address lookup
DSN generated by: BLUPR17MB0020.namprd17.pro d.outlook. com
Message Hops
HOP TIME (UTC) FROM TO WITH RELAY TIME
1 3/13/2018
1:33:00 PM BLUPR17MB0452.namprd17.pro d.outlook. com
BLUPR17MB0452.namprd17.pro d.outlook. com
mapi *
2 3/13/2018
1:33:02 PM BLUPR17MB0452.namprd17.pro d.outlook. com
BLUPR17MB0020.namprd17.pro d.outlook. com
Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_ AES_256_CB C_SHA384_P 256) 2 sec
Original Message Headers
Authentication-Results: domain2.com; dkim=none (message not signed)
header.d=none;domain2.com; dmarc=none action=none
header.from=domain1.com;
Received: from BLUPR17MB0452.namprd17.pro d.outlook. com (10.164.17.30) by
BLUPR17MB0020.namprd17.pro d.outlook. com (10.160.190.142) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_ AES_256_CB C_SHA384_P 256) id
15.20.548.13; Tue, 13 Mar 2018 13:33:02 +0000
Received: from BLUPR17MB0452.namprd17.pro d.outlook. com
([fe80::4b8:a916:6a8d:a1c6 ]) by BLUPR17MB0452.namprd17.pro d.outlook. com
([fe80::4b8:a916:6a8d:a1c6 %14]) with mapi id 15.20.0588.013; Tue, 13 Mar 2018
13:33:00 +0000
Content-Type: application/ms-tnef; name="winmail.dat"
Content-Transfer-Encoding: binary
From: Oleg Gudym <user1@domain1.com>
To: Andy Michalski <user2@domain2.com>
CC: Marcelo Motta <User3@domain1.com>, Andrea Zeman
<user3@domain1.com>, "Albina, Ballali" <User4@domain2.com>
Subject: RE: Sick Today
Thread-Topic: Sick Today
Thread-Index: AdO6z2ytoQGFhNKsRDWMz/7Af6 Wb0gAACL0Q
Date: Tue, 13 Mar 2018 13:33:00 +0000
Message-ID: <BLUPR17MB0452F604E17852A7 236E30BBBA D20@BLUPR1 7MB0452.na mprd17.pro d.outlook. com>
References: <A929E6263B1A654D8B9403EAA 8EFA28BFE6 8CFB6@vSRV 06.cac.loc al>
In-Reply-To: <A929E6263B1A654D8B9403EAA 8EFA28BFE6 8CFB6@vSRV 06.cac.loc al>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator: <BLUPR17MB0452F604E17852A7 236E30BBBA D20@BLUPR1 7MB0452.na mprd17.pro d.outlook. com>
MIME-Version: 1.0
X-Originating-IP: [50.193.154.113]
X-MS-PublicTrafficType: Email
X-Microsoft-Exchange-Diagn ostics: 1;BLUPR17MB0452;35:EZrcuyb tZgH35qmKw TH/MH07cc2 IEZKQQfWgq thnTDzTz/w Ao7Pgrq9QT fnf+mexwNJ tXqCO4nMpP JqVnbQGlQ= =
X-MS-Exchange-Antispam-SRF A-Diagnost ics: SSOS;SSOR;
X-Forefront-Antispam-Repor t:
SFV:SKI;SCL:-1;SFV:SKI;SFS :;DIR:INB; SFP:;SCL:- 1;SRVR:BLU PR17MB0020 ;H:BLUPR17 MB0452.nam prd17.prod .outlook.c om;FPR:;SP F:None;LAN G:en;
Return-Path: user1@domain1.com
X-MS-Office365-Filtering-C orrelation -Id: fe361bdf-d431-4fa7-465c-08 d588e6f0ed
X-Microsoft-Antispam:
UriScan:;BCL:0;PCL:0;RULEI D:(7020095 )(4652020) (5600026)( 4604075)(3 008032)(20 1705260332 8)(7153060 )(7193020) ;SRVR:BLUP R17MB0020;
X-Microsoft-Exchange-Diagn ostics:
1;BLUPR17MB0020;3:9PDA1dlY xzrVzTmfIt OVNjm785ch 3C+F71gOke 2CMXKXsymg 8grAsUafIM 1H4zDKz3+l Np09D7/Bg5 3GNOfEslMl nCqN0qawLy CCg5BiqE4Q XMWNjqf0/Y S/aKrlzXa7 i+wodqRcMH WVGG8uzTCp SzvINtwerx JnniGm/Uvx muLGhk6AAP FPQiQNU4HC K8tyT6zLMD aoNBYj+083 CIPvL8yVWO 2zpukrWWMA g0ChncQoUb tvy3d+zgi+ nyb9n6rL;2 5:uzQU2ruC IdKrRFjE8x fFiE1tDDFC 7GXGYnCkDE XtVb6vgxPr XnflDLV6JJ Fzw4JKaWVc q3JCZgdqoo NTwlZat43c G0DNGx1GhB m9tggL3hd/ KurmzN2Q3j XWODjLUgZK jYchgEANhI r662bXRCJr OQErQUEoX9 htXL7b0TYY 1/ZKZCpk4u UH2seQnfbI 17HK1aLvYE HNGU/a/h8U DZxANByAn7 5dKbM7s4nl FkcRkVRat+ cDRkgBjMmC ebI9ZDqUCR qXBNsz6diI jez1qHAooN QeKgmHi8VV VQk9UhEeE0 Z4r8HNXLjX pUzsAWg9Yj f5FbPNMApl t/ZfOTvH4W lVsw==;31: eLqzvrr31M gzBTC+qUYN nJ2WYNo2dQ 0eSsV6oepP 4AtwgtQ4J/ 3bOiahonYT bMAXtjgmUA WAnt40gYMn L/TGJ8I6b4 jhVY7UP9iN RaZ6nsNlDi 1OS6D5Jn4F z40ptCmLrX Y10YxHchgL CD2MkbZYRm bobkolNul1 smdSnJ9gTJ x5Vf7rFvUg rMsM73VgZR loWOwoOK6F BfGLZh8CKN kOy1NZf1JF 5435f83X7F eFOss=
X-MS-TrafficTypeDiagnostic : BLUPR17MB0020:
X-Exchange-Antispam-Report -Test: UriScan:(28532068793085)(2 1748063052 155);
X-Exchange-Antispam-Report -CFA-Test:
BCL:0;PCL:0;RULEID:(910152 4173)(2401 047)(81215 01046)(300 2001)(9300 6095)(9300 1095)(1020 1501046)(3 231221)(94 4501244)(5 2105095)(2 0170807174 2011);SRVR :BLUPR17MB 0020;BCL:0 ;PCL:0;RUL EID:;SRVR: BLUPR17MB0 020;
X-Microsoft-Exchange-Diagn ostics:
1;BLUPR17MB0020;4:ZM46gBFf XuiL4QbfLP T660FN17UA 4E37NrGu2J eKm6dVI8Yk khmpKeEs3z vPlHImWnAD Aaffl9WNI7 bW4dh85A4b dnhmDiMbCS MjvMWAyIvv CmjX7fQgo/ VXCcjMQw4s oTmDkftL50 LNm75WqYFr JX4SDFdMHr y3PXUfS0ww LheK6WJ7aK AStfpcAOXg yP4BrVOF4U 7Av2LHlRBv nmuCIuclMt Bd8Q2V9Fvc EtOEgbhiwD saV7JWbgmW UqsQKOsHsR QXernk1loq /cAQNncjzB o3m2FT/E2T qSi3aWRg8G 7R1NDpbh41 t2YHGOHKrO NAMehDdo7d jQ3uNIrKri 8MaJmfh0sl gfV85kcdba 4YUOU=;23: d3YUjmKvd+ 6db1bF0pYJ SajIgk0f1z Yy5P2y4wHr iV7bzMhqQJ TWbSNptHu9 IImI7B7DNv LlYq7OBz4e keW7qoZ9m2 /ZDstU0Pfm riyXqdl0fA d+Z+wTxQn2 gn8uVinK;6 :IuRzLDAlP jneUztWoA4 3HiMA7CdJC Bpp7Z6EPkc 2LcZo08BzV Ovg4X4zVtX SMaUuZahIB iJ1A8K6Ei0 5Us33AZgES ZIljmiQw4O 6XbbfN7tLg iIFn7rnYXj B/mKUtdNJR dMI7FX5ii8 3MAK1+Ru2t hngTdn48je ur9z21wte4 Mq93R6tT0M 2qpgqpIk02 gNl3ZZ9nEV Z/tjXx3MW1 lO85JMDi5m GuPI+3vdQj I4FcdN0K8F zWj3OGsP2Q 1NqjIQzjWf LVx8AuZqLq U7PnbLLfmR PfyqBFgITg nTTbSYNowr jNMm4fT9Fs gUV5tWF/IV oBnt9g1UrS ruQvMIYaRm bhRx8a4xtC 2m3yzCq9S3 leGPU+1tL7 ppjjhnZzci +KwSJ
X-Microsoft-Antispam-Messa ge-Info:
cnPkLzAX6I2EmTSKHnfaojRsHH TbovSjK+UM wG/BiaJzs1 VPpf6mej7t 8sHlxbj/ae RAqH9VxvBK +nxTSFHJaz Q4eLrzIhQv XeYfjQXDOW W4QLfDAE8t hvh4LaiwQo hWGZeIYBZ7 nmCjAfuJcK w2Bv6WDN0d BA8f08sG08 4rA/ONzt1g Qzy5wYDUfN /SqGmfAvM0 NPvpzAdGKt KamqWFsqvH 5Mf7hQqUkL PGWJHfGcKj DRsEIgu/eq RU4YkFAi/W k9r34N6V17 zeh/Heennj flhDFB443U 8aIeAVY3K+ PvadG9vpo0 4UTKbxnYt6 00KSjlhqy5 Fj4oP6L5UP z1TQiQ==
X-Microsoft-Exchange-Diagn ostics:
1;BLUPR17MB0020;5:2ymu6BhB n+yHFjMrSx yneAhEdN/5 SE+j3K2DMp qnpluI0+2w 3H5izuxQVF d2jS5Ha+gi HSrl1P9vWt gNbtBzmDa5 MpVORGvby1 P/4fFkQxkt VyDAprC8Fg hqQftb+hPL RtTqHKk+y5 XCoNBmbaTB Ifog2skM1x T0c7wzBX6Y MYo=;24:rM 4t8CR+RDL3 Oa1UGIq8xP ZSyg9gfVnt mOL2YsBjfS f/csPiyNuq 4G/P/mjDyC FxPoT4veKM +sOtJ/yaIL 35G/0Wep4J THDZmLgvEt eq2P0=;7:Z 6LWNaJCZKE V9FUcmFo8S DwQdnyoX3h jp7FlXbURo TeLmMqo0vL Ky3YGM0EVd 4LD1UqmyIT jOZji9ZVYL sRV3f00qxy xnEWokXgzk yfBBTHrN0R KjKj3+FUnU YCUMRJ4GHs +mTX9oscH0 LTbcsFX7+5 72GVrIZwbk CcLT2AhWp6 3cvyp3Rcjy e/7qD8O4b9 LhZGM+TB+l C3I1KGJUvX ELe/EbppOE JlN5BlCxVg 7uxqvte9hR GLO2mo2Zj1 7e2yB
SpamDiagnosticOutput: 1:0
X-MS-Exchange-CrossTenant- OriginalAr rivalTime: 13 Mar 2018 13:33:00.8418
(UTC)
X-MS-Exchange-CrossTenant- FromEntity Header: Hosted
X-MS-Exchange-CrossTenant- Id: ea681ba6-a990-4040-8c61-18 addcbded7e
X-MS-Exchange-CrossTenant- Network-Me ssage-Id: fe361bdf-d431-4fa7-465c-08 d588e6f0ed
X-MS-Exchange-Transport-Cr ossTenantH eadersStam ped: BLUPR17MB0020
-------------------------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- --------
From: Microsoft Outlook
Sent: Monday, March 12, 2018 3:57 PM
To: User1
Subject: Undeliverable:
Your message to user2@domain2.com couldn't be delivered.
user2 wasn't found at domain2.com.
user1 Office 365 user2
Action Required Recipient
Unknown To address
How to Fix It
The address may be misspelled or may not exist. Try one or more of the following:
• Send the message again following these steps: In Outlook, open this non-delivery report (NDR) and choose Send Again from the Report ribbon. In Outlook on the web, select this NDR, then select the link "To send this message again, click here." Then delete and retype the entire recipient address. If prompted with an Auto-Complete List suggestion don't select it. After typing the complete address, click Send.
• Contact the recipient (by phone, for example) to check that the address exists and is correct.
• The recipient may have set up email forwarding to an incorrect address. Ask them to check that any forwarding they've set up is working correctly.
• Clear the recipient Auto-Complete List in Outlook or Outlook on the web by following the steps in this article: Fix email delivery issues for error code 5.1.10 in Office 365, and then send the message again. Retype the entire recipient address before selectingSend.
If the problem continues, forward this message to your email admin. If you're an email admin, refer to the More Info for Email Adminssection below.
Was this helpful? Send feedback to Microsoft.
__________________________ __________ ____
More Info for Email Admins
Status code: 550 5.1.10
This error occurs because the sender sent a message to an email address hosted by Office 365 but the address is incorrect or doesn't exist at the destination domain. The error is reported by the recipient domain's email server, but most often it must be fixed by the person who sent the message. If the steps in the How to Fix It section above don't fix the problem, and you're the email admin for the recipient, try one or more of the following:
The email address exists and is correct - Confirm that the recipient address exists, is correct, and is accepting messages.
Synchronize your directories - If you have a hybrid environment and are using directory synchronization make sure the recipient's email address is synced correctly in both Office 365 and in your on-premises directory.
Errant forwarding rule - Check for forwarding rules that aren't behaving as expected. Forwarding can be set up by an admin via mail flow rules or mailbox forwarding address settings, or by the recipient via the Inbox Rules feature.
Recipient has a valid license - Make sure the recipient has an Office 365 license assigned to them. The recipient's email admin can use the Office 365 admin center to assign a license (Users > Active Users > select the recipient > Assigned License > Edit).
Mail flow settings and MX records are not correct - Misconfigured mail flow or MX record settings can cause this error. Check your Office 365 mail flow settings to make sure your domain and any mail flow connectors are set up correctly. Also, work with your domain registrar to make sure the MX records for your domain are configured correctly.
For more information and additional tips to fix this issue, see Fix email delivery issues for error code 5.1.10 in Office 365.
Original Message Details
Created Date: 3/12/2018 7:57:01 PM
Sender Address: user1@domain1.com
Recipient Address: user2@domain2.com
Subject: MirrorCast in the conference room
Error Details
Reported error: 550 5.1.10 RESOLVER.ADR.RecipientNotF ound; Recipientuser2@domain2.com not found by SMTP address lookup
DSN generated by: BLUPR17MB0434.namprd17.pro d.outlook. com
Message Hops
HOP TIME (UTC) FROM TO WITH RELAY TIME
1 3/12/2018
7:57:02 PM BLUPR17MB0452.namprd17.pro d.outlook. com
BLUPR17MB0452.namprd17.pro d.outlook. com
mapi 1 sec
2 3/12/2018
7:57:02 PM BLUPR17MB0452.namprd17.pro d.outlook. com
BLUPR17MB0434.namprd17.pro d.outlook. com
Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_ AES_256_CB C_SHA384_P 256) *
Original Message Headers
Authentication-Results: domain1.com; dkim=none (message not signed)
header.d=none;domain1.com; dmarc=none action=none
header.from=domain1.com;
Received: from BLUPR17MB0452.namprd17.pro d.outlook. com (10.164.17.30) by
BLUPR17MB0434.namprd17.pro d.outlook. com (10.164.17.24) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_ AES_256_CB C_SHA384_P 256) id
15.20.567.14; Mon, 12 Mar 2018 19:57:02 +0000
Received: from BLUPR17MB0452.namprd17.pro d.outlook. com
([fe80::4cc4:75f5:93d0:256 4]) by BLUPR17MB0452.namprd17.pro d.outlook. com
([fe80::4cc4:75f5:93d0:256 4%14]) with mapi id 15.20.0548.021; Mon, 12 Mar
2018 19:57:02 +0000
Content-Type: application/ms-tnef; name="winmail.dat"
Content-Transfer-Encoding: binary
From: Oleg Gudym <user1@domain1.com>
To: Nate Carpenter <user3@domain1.com>, Adam Norris
<user4@domain1.com>
CC: Andy Michalski <user2@domain2.com>, Marcelo Motta
<User3@domain1.com>
Subject: MirrorCast in the conference room
Thread-Topic: MirrorCast in the conference room
Thread-Index: AdO6O18iDIiHzuv4QMWajyKvCi Kw3A==
Date: Mon, 12 Mar 2018 19:57:01 +0000
Message-ID: <BLUPR17MB045228556BF4306A 43F6C725BA D30@BLUPR1 7MB0452.na mprd17.pro d.outlook. com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: <BLUPR17MB045228556BF4306A 43F6C725BA D30@BLUPR1 7MB0452.na mprd17.pro d.outlook. com>
MIME-Version: 1.0
X-Originating-IP: [50.193.154.113]
X-MS-PublicTrafficType: Email
X-Microsoft-Exchange-Diagn ostics: 1;BLUPR17MB0452;35:hhtC++I RC94zxkQS0 D9XkGJ7Bdg doyf5aGkJ2 l/sBcVrDm5 DpQENisDgO 10ovjzCD7x YOzkkC0WjV 3PVoApa8A= =
X-MS-Exchange-Antispam-SRF A-Diagnost ics: SSOS;SSOR;
Return-Path: user1@domain1.com
X-MS-Office365-Filtering-C orrelation -Id: a1f3d243-20de-48be-bb6f-08 d588536c1c
X-Microsoft-Antispam:
UriScan:;BCL:0;PCL:0;RULEI D:(7020095 )(4652020) (5600026)( 4604075)(3 008032)(20 1705260332 8)(7153060 )(49563074 )(7193020) ;SRVR:BLUP R17MB0434;
X-Microsoft-Exchange-Diagn ostics:
1;BLUPR17MB0434;3:nDvznln2 8AV6w/frOR dn8TbKhEfO R4mONJkgmp GjQBkoN8v6 ttRe3K+bT/ DQnfjnz836 sR/Ap7hJHU HNVaMCqqKA /w/2eQuhht YtTEH9Tj0w yBSr7jyoj7 nS6fPoSaYo 6rRlfbVEHW s6fWbJ11Eu 3w0DVCzcGM cisRDjZZyz 4nnwYT9aQ9 gdZD1FGMy4 SiVq2RQN3B IXpjO/ppQO aRz/2wX2hd xsizI9IKDt bj1drWKc0R IVuoIUnsSA VGy6+L2X;2 5:cdii5McH bRxU+tBFOk 4yTQ6wbfz0 AfkbuMkyET 0m5Xye7MhB w4kO2LQ32i h9SI9bH6st /J85UM6WYb dnO/4hfZQ8 7e14usXJdk 76M8OyVUk7 IS37gkGHcz dJTB3iRUaa 3JCsLoGDxA dvTtgPih3d UEKr8+c5Yp sKcsdLVgcw GZodNC3Fwt tQXNCnsbh0 3WvhcpjPTu I2k1gL93KJ 8mQMdLq9ry osIJq04Nms 7N4paxM7GU 3dq9VTDjBm QKDJPErsS1 43l7SHEgWq 7i3yNExEOj W1uer+j8Y0 5pAc2tXORA NBBnuyPp57 BIDE0agkLu P9fWb0ynu4 xzP1aDWwsE SrbA==;31: ZVrVnGiILc OqsQTs7blH HLbld7poWh G0zTdNv4Dz P4dBQHgw3I lg+BNSHTtB DN/AmcdJwk QJ93akWWjj v3gKF9i5aL 9r+SfbHhhn weXhu74pAA GqBt2vM0p6 elDaG7CA1H rRKUKAEP7H ntSzw8Zs3Q bPG7JYnJ3c Q+dBiDtVeM XIPs+BaPpE cgzSAIMlP5 5AY074tqWn sEz6sJjm/0 VYIslC1rE6 b/65kRLpKA oNMq8=
X-MS-TrafficTypeDiagnostic : BLUPR17MB0434:
X-Exchange-Antispam-Report -Test:
UriScan:(28532068793085)(2 0935206734 9851)(2174 8063052155 )(21532816 269658);
X-Exchange-Antispam-Report -CFA-Test:
BCL:0;PCL:0;RULEID:(102415 395)(91015 24173)(240 1047)(8121 501046)(93 006095)(93 001095)(30 02001)(323 1220)(9445 01244)(521 05095)(102 01501046)( 2017080717 42011);SRV R:BLUPR17M B0434;BCL: 0;PCL:0;RU LEID:;SRVR :BLUPR17MB 0434;
X-Microsoft-Exchange-Diagn ostics:
1;BLUPR17MB0434;4:0lp4a5On /hUaqipawX 3u7X/QGmJn b5VJzwApBw 17wDyOqKZY zY+0eXrptR EmkXGJEZ+0 O7sie3I5XW Ow0qmYMY5L pQCh/HqAqR Q8c5D5nN8G KfgffjdbvZ nwcEGOSmso reRb8ZhpaS 5B+k98HHgf 3jXFegGvhT EvAlcjwhGu GFFXNvWt7r mahc1+CRr2 69svbCprwN aKP+gnURqe AhHDJBzR3e 5LxwfubEkd otrSPUKjZc FklTBphlmX lszKGwrJSs FU6xJCLgsU eQS8DfPHP2 iaSVWyT1nw EWGb4xmL6M SXP3j4af9r zcU4IU+uSY kkfT/xet81 WuxVL5nwqs Fr+HUPM69g DPlJX07I8Q +q1BOx3+zQ bYoKzocNud n5rM77ufZI aiCxa7NjlY dI6Y7fbSGN 3gd9YnBdP/ 594ePMk98= ;23:mZ+jUr SeoKKwbviN FvRb2QrTGS 2Q3dILHwV5 xAPL/xML3r N8EuB531uf PSIlZAl2kh DvpblRP0lE x3o0SscO5J odzppoXt5U pLz6+7f0nT EFR9VXe591 f3D7j95B3i j2
X-Forefront-Antispam-Repor t:
SFV:SKI;SFS:;DIR:INB;SFP:; SCL:-1;SRV R:BLUPR17M B0434;H:BL UPR17MB045 2.namprd17 .prod.outl ook.com;FP R:;SPF:Non e;LANG:en;
X-Microsoft-Antispam-Messa ge-Info:
cHiIEjdXoNBRXlp03lJtMC87VY SzySs6D7s9 zfWB9aoWfT f2sEZXX6Hw SKFGTtQ+3r c7Hx+Xy8K3 u4gNxbogG2 B3AIIX8Iv0 zhEStQ2Cta NzGwXNIs0N E62GjwVu25 3N1ySTZzz+ 7Nsr5GpG9A lFawtuvVkE +N1h+7aJhV Ofx6m3mb4Q a5QHNH8lbN CyuBCroNTG GTY1QJR3bF cXlwTE3bom ydeGmHUm8J zaSSbp0vm2 8VkjOc5BZV UpZ4k+aZMl 6wtlQtvH5e eq5UvEhmP3 Fne0N1ChuQ 1HpnWsGeiC OfpcxTmUUa 2kqCchOpnC MtT7tzFuLF /BeRoanU6C /P6OkA==
X-Microsoft-Exchange-Diagn ostics:
1;BLUPR17MB0434;6:XodiOqYJ XN5Y1Wi0rF zNii37xU9t kXyCAMp7fg M/iPfYOvLf BN92MmQ5kQ T6j5ujnS4J 5AGg3xdpdO cfhcKpcYYb 9gOKExCQYO hv96MUTOhi 1bjm40cgFi hUTb0UQ+lR 6bmQDZuRIY CugnDy8058 6tqtHRaYLH Jc30CjdFki wqWlaYDYIn u8LOJ9Y9zu RTE+UUsiVp gPkSo89k24 iprYdRc1sT cefh2nDlsb dvutURdfjd Hg3lC2L448 VSt9wdOr0k 9Iqwsg6KBn lfSbDxzcHb DBUYKUYw6z FIcp0Kpo06 ccVRIl9zZm RUo6tKSZ7h xWGlIB4GSt cCEAb7Z8V4 ScYjdaakZl Va6X3hTiMj dZaSg/ETpM dv0FjsgGH3 Uru4OMV/PK TLiKECNBwB lrW12mNQ== ;5:5WJpoFJ I+aEGdPzEI 4lbPABnLkw iNHsOPP4h3 UJx0wrpWAX 7caB9+EcpA 7m6hMvLmoS MutBOsrdBq BuAnUkfe9L opIs/L9gWi 45mj04pJ9r iE2bnimR9H n0njxr5cmt wdOu7K0eDI s/T7RukeiQ nz0u35wVrV HmuFYTLsxr Mtj4=;24:g ljOp4BJQqH 7LhUeWVOaC oMLdW13wvs vYs8EUVqS2 9+JwpsamAs LPLFNyr82W vcaQwktrXQ Xi3PndYmuw Ip7buvcexb 98+qpkl6lD OOIIfc=
SpamDiagnosticOutput: 1:0
X-Microsoft-Exchange-Diagn ostics:
1;BLUPR17MB0434;7:pyUVApNC BtCQDDA9J8 ACgR1XixUa XcrrAU+Cu5 62BRfemipK VgHWkJjQFg MimFsWpQPT dLBEdHSlbE VvpTiY20H4 /wrnGsOXSb DBU/TCYNHv ZJtnvAqMrN LGZoVFbSp0 Z3PxAPm+mS wjfXyEFV+8 pExr/NVZuz EXGtQqGyWJ JmeuRFBxOc YtR54m7YhT cYj+xFyUfZ QEHU2yJyGq FgAuGq6zFu LtzNcJ0tNE JszfUSXMCc SmqSc7nncI aUTA1yDN
X-MS-Exchange-CrossTenant- OriginalAr rivalTime: 12 Mar 2018 19:57:01.7622
(UTC)
X-MS-Exchange-CrossTenant- FromEntity Header: Hosted
X-MS-Exchange-CrossTenant- Id: ea681ba6-a990-4040-8c61-18 addcbded7e
X-MS-Exchange-CrossTenant- Network-Me ssage-Id: a1f3d243-20de-48be-bb6f-08 d588536c1c
X-MS-Exchange-Transport-Cr ossTenantH eadersStam ped: BLUPR17MB0434
I am having a very strange Exchange issue. Here is a little background information. On Sunday We needed to restore an older database from our backups. After successful restore i opened the database with a third party Quest software. I had to installed Outlook (MAPI) for the software to run. We restore emails that we needed to.
On Monday several users complained that on Sunday they were getting prompted for password while working from home and Outlook would not accept password, but OWA did. When in the office, Outlook works fine.
On Tuesday i arrive to the office and i get an error message while launching Outlook saying that my mailbox was moved and i had an option use temporary mailbox or offline version. The only way to fix this was to delete the profile. Which i did.
Throughout the day i sent bunch of emails and never got responses to. Towards the end of the evening i confirmed with one user that my email from an hour ago didn't go through, when i resent it, it went through right away.
I get home, open my outlook and all mail in inbox is missing except Brand new bounce back emails from the entire day. I log into my OWA and all of my mail is there, but the bounce back emails are not. Below is an example of two bounce back emails. Any suggestions how to start troubleshooting this issue?
We are using Exchange 2010, not 365.
From: Microsoft Outlook
Sent: Tuesday, March 13, 2018 9:33 AM
To: User1
Subject: Undeliverable: RE: Sick Today
Your message couldn't be delivered to multiple recipients.
The recipients weren't found at the destination domains.
user1 Office 365 Recipients
Action Required Recipients
Unknown To address
Couldn't deliver to the following recipients:
user2@domain2.com, user3@domain1.com, User4@domain2.com
How to Fix It
The address may be misspelled or may not exist. Try one or more of the following:
• Send the message again following these steps: In Outlook, open this non-delivery report (NDR) and choose Send Again from the Report ribbon. In Outlook on the web, select this NDR, then select the link "To send this message again, click here." Then delete and retype the entire recipient address. If prompted with an Auto-Complete List suggestion don't select it. After typing the complete address, click Send.
• Contact the recipient (by phone, for example) to check that the address exists and is correct.
• The recipient may have set up email forwarding to an incorrect address. Ask them to check that any forwarding they've set up is working correctly.
• Clear the recipient Auto-Complete List in Outlook or Outlook on the web by following the steps in this article: Fix email delivery issues for error code 5.1.10 in Office 365, and then send the message again. Retype the entire recipient address before selectingSend.
If the problem continues, forward this message to your email admin. If you're an email admin, refer to the More Info for Email Adminssection below.
Was this helpful? Send feedback to Microsoft.
__________________________
More Info for Email Admins
Status code: 550 5.1.10
This error occurs because the sender sent a message to an email address hosted by Office 365 but the address is incorrect or doesn't exist at the destination domain. The error is reported by the recipient domain's email server, but most often it must be fixed by the person who sent the message. If the steps in the How to Fix It section above don't fix the problem, and you're the email admin for the recipient, try one or more of the following:
The email address exists and is correct - Confirm that the recipient address exists, is correct, and is accepting messages.
Synchronize your directories - If you have a hybrid environment and are using directory synchronization make sure the recipient's email address is synced correctly in both Office 365 and in your on-premises directory.
Errant forwarding rule - Check for forwarding rules that aren't behaving as expected. Forwarding can be set up by an admin via mail flow rules or mailbox forwarding address settings, or by the recipient via the Inbox Rules feature.
Recipient has a valid license - Make sure the recipient has an Office 365 license assigned to them. The recipient's email admin can use the Office 365 admin center to assign a license (Users > Active Users > select the recipient > Assigned License > Edit).
Mail flow settings and MX records are not correct - Misconfigured mail flow or MX record settings can cause this error. Check your Office 365 mail flow settings to make sure your domain and any mail flow connectors are set up correctly. Also, work with your domain registrar to make sure the MX records for your domain are configured correctly.
For more information and additional tips to fix this issue, see Fix email delivery issues for error code 5.1.10 in Office 365.
Original Message Details
Created Date: 3/13/2018 1:33:00 PM
Sender Address: user1@domain1.com
Recipient Address: user2@domain2.com, user3@domain1.com, . . .
Subject: RE: Sick Today
Error Details
Reported error: 550 5.1.10 RESOLVER.ADR.RecipientNotF
DSN generated by: BLUPR17MB0020.namprd17.pro
Message Hops
HOP TIME (UTC) FROM TO WITH RELAY TIME
1 3/13/2018
1:33:00 PM BLUPR17MB0452.namprd17.pro
BLUPR17MB0452.namprd17.pro
mapi *
2 3/13/2018
1:33:02 PM BLUPR17MB0452.namprd17.pro
BLUPR17MB0020.namprd17.pro
Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_
Original Message Headers
Authentication-Results: domain2.com; dkim=none (message not signed)
header.d=none;domain2.com;
header.from=domain1.com;
Received: from BLUPR17MB0452.namprd17.pro
BLUPR17MB0020.namprd17.pro
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_
15.20.548.13; Tue, 13 Mar 2018 13:33:02 +0000
Received: from BLUPR17MB0452.namprd17.pro
([fe80::4b8:a916:6a8d:a1c6
([fe80::4b8:a916:6a8d:a1c6
13:33:00 +0000
Content-Type: application/ms-tnef; name="winmail.dat"
Content-Transfer-Encoding:
From: Oleg Gudym <user1@domain1.com>
To: Andy Michalski <user2@domain2.com>
CC: Marcelo Motta <User3@domain1.com>, Andrea Zeman
<user3@domain1.com>, "Albina, Ballali" <User4@domain2.com>
Subject: RE: Sick Today
Thread-Topic: Sick Today
Thread-Index: AdO6z2ytoQGFhNKsRDWMz/7Af6
Date: Tue, 13 Mar 2018 13:33:00 +0000
Message-ID: <BLUPR17MB0452F604E17852A7
References: <A929E6263B1A654D8B9403EAA
In-Reply-To: <A929E6263B1A654D8B9403EAA
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator: <BLUPR17MB0452F604E17852A7
MIME-Version: 1.0
X-Originating-IP: [50.193.154.113]
X-MS-PublicTrafficType: Email
X-Microsoft-Exchange-Diagn
X-MS-Exchange-Antispam-SRF
X-Forefront-Antispam-Repor
SFV:SKI;SCL:-1;SFV:SKI;SFS
Return-Path: user1@domain1.com
X-MS-Office365-Filtering-C
X-Microsoft-Antispam:
UriScan:;BCL:0;PCL:0;RULEI
X-Microsoft-Exchange-Diagn
1;BLUPR17MB0020;3:9PDA1dlY
X-MS-TrafficTypeDiagnostic
X-Exchange-Antispam-Report
X-Exchange-Antispam-Report
BCL:0;PCL:0;RULEID:(910152
X-Microsoft-Exchange-Diagn
1;BLUPR17MB0020;4:ZM46gBFf
X-Microsoft-Antispam-Messa
cnPkLzAX6I2EmTSKHnfaojRsHH
X-Microsoft-Exchange-Diagn
1;BLUPR17MB0020;5:2ymu6BhB
SpamDiagnosticOutput: 1:0
X-MS-Exchange-CrossTenant-
(UTC)
X-MS-Exchange-CrossTenant-
X-MS-Exchange-CrossTenant-
X-MS-Exchange-CrossTenant-
X-MS-Exchange-Transport-Cr
--------------------------
From: Microsoft Outlook
Sent: Monday, March 12, 2018 3:57 PM
To: User1
Subject: Undeliverable:
Your message to user2@domain2.com couldn't be delivered.
user2 wasn't found at domain2.com.
user1 Office 365 user2
Action Required Recipient
Unknown To address
How to Fix It
The address may be misspelled or may not exist. Try one or more of the following:
• Send the message again following these steps: In Outlook, open this non-delivery report (NDR) and choose Send Again from the Report ribbon. In Outlook on the web, select this NDR, then select the link "To send this message again, click here." Then delete and retype the entire recipient address. If prompted with an Auto-Complete List suggestion don't select it. After typing the complete address, click Send.
• Contact the recipient (by phone, for example) to check that the address exists and is correct.
• The recipient may have set up email forwarding to an incorrect address. Ask them to check that any forwarding they've set up is working correctly.
• Clear the recipient Auto-Complete List in Outlook or Outlook on the web by following the steps in this article: Fix email delivery issues for error code 5.1.10 in Office 365, and then send the message again. Retype the entire recipient address before selectingSend.
If the problem continues, forward this message to your email admin. If you're an email admin, refer to the More Info for Email Adminssection below.
Was this helpful? Send feedback to Microsoft.
__________________________
More Info for Email Admins
Status code: 550 5.1.10
This error occurs because the sender sent a message to an email address hosted by Office 365 but the address is incorrect or doesn't exist at the destination domain. The error is reported by the recipient domain's email server, but most often it must be fixed by the person who sent the message. If the steps in the How to Fix It section above don't fix the problem, and you're the email admin for the recipient, try one or more of the following:
The email address exists and is correct - Confirm that the recipient address exists, is correct, and is accepting messages.
Synchronize your directories - If you have a hybrid environment and are using directory synchronization make sure the recipient's email address is synced correctly in both Office 365 and in your on-premises directory.
Errant forwarding rule - Check for forwarding rules that aren't behaving as expected. Forwarding can be set up by an admin via mail flow rules or mailbox forwarding address settings, or by the recipient via the Inbox Rules feature.
Recipient has a valid license - Make sure the recipient has an Office 365 license assigned to them. The recipient's email admin can use the Office 365 admin center to assign a license (Users > Active Users > select the recipient > Assigned License > Edit).
Mail flow settings and MX records are not correct - Misconfigured mail flow or MX record settings can cause this error. Check your Office 365 mail flow settings to make sure your domain and any mail flow connectors are set up correctly. Also, work with your domain registrar to make sure the MX records for your domain are configured correctly.
For more information and additional tips to fix this issue, see Fix email delivery issues for error code 5.1.10 in Office 365.
Original Message Details
Created Date: 3/12/2018 7:57:01 PM
Sender Address: user1@domain1.com
Recipient Address: user2@domain2.com
Subject: MirrorCast in the conference room
Error Details
Reported error: 550 5.1.10 RESOLVER.ADR.RecipientNotF
DSN generated by: BLUPR17MB0434.namprd17.pro
Message Hops
HOP TIME (UTC) FROM TO WITH RELAY TIME
1 3/12/2018
7:57:02 PM BLUPR17MB0452.namprd17.pro
BLUPR17MB0452.namprd17.pro
mapi 1 sec
2 3/12/2018
7:57:02 PM BLUPR17MB0452.namprd17.pro
BLUPR17MB0434.namprd17.pro
Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_
Original Message Headers
Authentication-Results: domain1.com; dkim=none (message not signed)
header.d=none;domain1.com;
header.from=domain1.com;
Received: from BLUPR17MB0452.namprd17.pro
BLUPR17MB0434.namprd17.pro
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_
15.20.567.14; Mon, 12 Mar 2018 19:57:02 +0000
Received: from BLUPR17MB0452.namprd17.pro
([fe80::4cc4:75f5:93d0:256
([fe80::4cc4:75f5:93d0:256
2018 19:57:02 +0000
Content-Type: application/ms-tnef; name="winmail.dat"
Content-Transfer-Encoding:
From: Oleg Gudym <user1@domain1.com>
To: Nate Carpenter <user3@domain1.com>, Adam Norris
<user4@domain1.com>
CC: Andy Michalski <user2@domain2.com>, Marcelo Motta
<User3@domain1.com>
Subject: MirrorCast in the conference room
Thread-Topic: MirrorCast in the conference room
Thread-Index: AdO6O18iDIiHzuv4QMWajyKvCi
Date: Mon, 12 Mar 2018 19:57:01 +0000
Message-ID: <BLUPR17MB045228556BF4306A
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: <BLUPR17MB045228556BF4306A
MIME-Version: 1.0
X-Originating-IP: [50.193.154.113]
X-MS-PublicTrafficType: Email
X-Microsoft-Exchange-Diagn
X-MS-Exchange-Antispam-SRF
Return-Path: user1@domain1.com
X-MS-Office365-Filtering-C
X-Microsoft-Antispam:
UriScan:;BCL:0;PCL:0;RULEI
X-Microsoft-Exchange-Diagn
1;BLUPR17MB0434;3:nDvznln2
X-MS-TrafficTypeDiagnostic
X-Exchange-Antispam-Report
UriScan:(28532068793085)(2
X-Exchange-Antispam-Report
BCL:0;PCL:0;RULEID:(102415
X-Microsoft-Exchange-Diagn
1;BLUPR17MB0434;4:0lp4a5On
X-Forefront-Antispam-Repor
SFV:SKI;SFS:;DIR:INB;SFP:;
X-Microsoft-Antispam-Messa
cHiIEjdXoNBRXlp03lJtMC87VY
X-Microsoft-Exchange-Diagn
1;BLUPR17MB0434;6:XodiOqYJ
SpamDiagnosticOutput: 1:0
X-Microsoft-Exchange-Diagn
1;BLUPR17MB0434;7:pyUVApNC
X-MS-Exchange-CrossTenant-
(UTC)
X-MS-Exchange-CrossTenant-
X-MS-Exchange-CrossTenant-
X-MS-Exchange-CrossTenant-
X-MS-Exchange-Transport-Cr
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
It did not mount the database on the Exchange. I also know that Rapid Recovery didn't mess with Exchange because i worked at Dell on backup and recovery team and we used this software to Exchange restores. Basically what it does just opens unmounted database and you're able to drill down to a single mailbox and restore a PST.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
@Alen - Suggesting Exchange server is broken without more details is a bit extreme. Exchange server working fine without any issues.
What ended up happening is this client has Office 365 Business premium subscription. Office 365 Business plan comes with Online Exchange. My AD and Office 365 password was the same. For some reason Outlook connected to Office 365 Exchange instead of our in house Exchange server. I opened a support ticket with MS, they are still trying to figure out why this happened. Same issue happened to another user in our organization, right after his AD password expired and he changed it to whatever his Office 365 password was. Has anyone experienced this issue before?
What ended up happening is this client has Office 365 Business premium subscription. Office 365 Business plan comes with Online Exchange. My AD and Office 365 password was the same. For some reason Outlook connected to Office 365 Exchange instead of our in house Exchange server. I opened a support ticket with MS, they are still trying to figure out why this happened. Same issue happened to another user in our organization, right after his AD password expired and he changed it to whatever his Office 365 password was. Has anyone experienced this issue before?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Options for resolving given.
ASKER
Yes, but the restore was not through exchange server. Restore was through a third part application to a completely different volume on the server. So basically i restored a database from 2015, opened it with a third party app and restored a single mailbox to a PST file. I did try ti create a new recovery database and point it to the restored DB, but received an error and didn't move forward. What do you think?