We have a DL named "London HR Staff" which has about 40 members. Problem is, when my manager emails this DL, he gets an NDR from user@externaldomain.com I'm assuming that someone has an auto-forward rule in their Outlook to send messages to their Hotmail. Any way to find out which user has the rule without going and checking all their Outlook settings? Any way in the message tracking log?

Version of Exchange? Message tracking might tell you. Do you have a valid business reason to have automatic forwarding enabled? If not, turn it off. It can allow confidential information to leak very easily. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

I should have mentioned; Exchange 2007 SP1 is the Exchange version with Outlook 2007 SP2 clients. The DL name is London.HR.Staff@mydomain.com I am sending email to it from me@mydomain.com I'm on ExchMBX1.mydomain.com, but the DL has recipients across the board in various Exchange MBX servers which are in multiple AD sites each with multiple HT's. Do you know how I can run Message tracking to find out the name of the person who has auto-forwarding on their Outlook? What sort of Powershell command would i run? We should look at disabling this, you're correct.

You may have to query the message tracking logs on each hub transport server, because you don't know where the message originated from. Message tracking will not tell you who has the autoforward rule on, all it may tell you is where the message originated from. You would then have to get the rule removed. Message tracking is part of the toolbox in the management console. However I repeat what I said above - automatic forwarding of email is not something I generally recommend should be enabled, because it can cause to an email loop. It puts the forward outside of the contract of the server administrator. If someone has a legitimate need to forward messages to an external mailbox this should be done through a contact on their mail object. The forward is then known and in the event of a data leak, you can control the situation. As it is now, you could have sensitive emails being forwarded to another mailbox outside of your control. If you are in a regulated business then you may well be breaking the law by allowing that to happen. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

On Mon, 17 Jan 2011 21:01:32 +0000, Sheen1990 wrote: > > >I should have mentioned; Exchange 2007 SP1 is the Exchange version with Outlook 2007 SP2 clients. > >The DL name is London.HR.Staff@mydomain.com > >I am sending email to it from me@mydomain.com > >I'm on ExchMBX1.mydomain.com, but the DL has recipients across the board in various Exchange MBX servers which are in multiple AD sites each with multiple HT's. > >Do you know how I can run Message tracking to find out the name of the person who has auto-forwarding on their Outlook? What sort of Powershell command would i run? > >We should look at disabling this, you're correct. Not Powershell, but this may still work: http://gsexdev.blogspot.com/2005/10/reporting-on-forwarding-rules-in.html --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP