Retrieving NDR's sent to Exchange
Strange situation: User has email address user1@domain.com and all was working fine.
Unfortunately, someone added a Contact within AD with an email address of user1@domain.com So today whenever anyone emailed him, they received an NDR saying "Ambigous Address". We deleted the Contact and everything is now fine.
Question is - is there any way to retrieve the messages that the user did not get? Would they be stored on a badmail folder anywhere if sent internally? And if sent from the outside?
July 11th, 2011 4:23pm
On Mon, 11 Jul 2011 20:15:05 +0000, Digitalco wrote:
>
>
>Strange situation: User has email address user1@domain.com and all was working fine.
>
>Unfortunately, someone added a Contact within AD with an email address of user1@domain.com So today whenever anyone emailed him, they received an NDR saying "Ambigous Address". We deleted the Contact and everything is now fine.
>
>Question is - is there any way to retrieve the messages that the user did not get? Would they be stored on a badmail folder anywhere if sent internally? And if sent from the outside?
No, the message couldn't be accepted and it's a "system message" (i.e.
the sender's address is "<>") the message is just discarded.
FYI, the only way to add a duplicate address is by writing your own
code or using LDIFDE (and maybe ADMODIFY.net). Find that person and
deploy the "clue-by-four". :-)
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
July 11th, 2011 5:56pm
Thanks Richard.
Yes, we do use custom code so we'll need to track down who added this.
OK, so we can't retrieve these emails, is there anway to find out who sent messages to
user1@domain.com whilst we had this problem? Can we use message tracking to search for all messages sent to
user1@domain.com since, say, Friday and then look at which ones were rejected? Would this be valid?
July 11th, 2011 6:03pm
On Mon, 11 Jul 2011 21:54:55 +0000, Digitalco wrote:
>Yes, we do use custom code so we'll need to track down who added this.
They need to verify that the addresses they're adding cannot be found
in any proxyAddresses property, and they need to use a GC (not a DC)
when they do that checking.
>OK, so we can't retrieve these emails, is there anway to find out who sent messages to user1@domain.com whilst we had this problem? Can we use message tracking to search for all messages sent to user1@domain.com since, say, Friday and then look at which
ones were rejected? Would this be valid?
No. The messages were sent using the null address ("<>") so that's all
you'll see in the SMTP receive protocol logs. I don't think you'll
find them in the message tracking logs either, but you can try.
Perform the search by looking for the recipient address. Even if you
do find them there I don't think the sender's address (which would
only be in the message "From:" header).
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
July 11th, 2011 10:19pm