What address was mail received on?
Hi,
yes this is possible please check the message headerr in orer to get this information.
A description how to show up the message headerr using Outlook 2010:
http://benosullivan.co.uk/windows/how-to-view-email-headers-in-outlook-2010/
regards Thomas Paetzold visit my blog on: http://sus42.wordpress.com
March 20th, 2012 12:19am
hi,
What's your sender's address?
What's your receiver's address?
Post the message header here.
If you use your own address send a mail to she, do you have check the message header, is it correctly?
You can use the get-messagetrackinglog to search.
About get-messagetrackinglog you can see:http://technet.microsoft.com/en-us/library/aa997573.aspx
hope can help you
thanks,CastinLu
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 8:50am
On Sat, 24 Mar 2012 19:23:02 +0000, allonone wrote:
>Ya, so ?
So blind is blind.
>It wasnt me in first place wanting to hide the address, it was the sender. And if I should like to copy a mail to someone then I will send all kind of information, your argument could hold for any info in header and in body etc. Its at bit off-track.
>
>Still there is no reason for exchange, that i heard of, not to write your receving mailaddress in header if you got it via Bcc.
Nor is there a reason for it to do so.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
So if I give you a reason, then you agree?
April 28th, 2012 11:33am
Hi,
could we help you? If so it would be nice if you mark your question accordingly because this may help others who have got the same or a similr question.
Thanks a lot in advance
Kind regards
Thomas
regards Thomas Paetzold visit my blog on: http://sus42.wordpress.com
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 1:57pm
Ya, so ?
It wasnt me in first place wanting to hide the address, it was the sender.
And if I should like to copy a mail to someone then I will send all kind of information, your argument could hold for any info in header and in body etc. Its at bit off-track.
Still there is no reason for exchange, that i heard of, not to write your receving mailaddress in header if you got it via Bcc.
April 28th, 2012 3:42pm
On Sun, 25 Mar 2012 15:20:02 +0000, allonone wrote:
>On Sat, 24 Mar 2012 19:23:02 +0000, allonone wrote: >Ya, so ? So blind is blind. >It wasnt me in first place wanting to hide the address, it was the sender. And if I should like to copy a mail to someone then I will send all kind of information, your
argument could hold for any info in header and in body etc. Its at bit off-track. > >Still there is no reason for exchange, that i heard of, not to write your receving mailaddress in header if you got it via Bcc. Nor is there a reason for it to do so. ---
Rich Matheisen MCSE+I, Exchange MVP
>--- Rich Matheisen MCSE+I, Exchange MVPSo if I give you a reason, then you agree?
No.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 3:43pm
Hallo
I have a user with multiple email address.
User have received an email where I am unable to determine
what address was used as recipient address while looking in "Message Details".
Rant on:
Ok, I go to "Toolbox" -> "Message Tracking", trying to search...nothing...expand search...Very few mails. Hmm?
Ah I need to use "Tracking Log explorer"....makes no sence to me. Searching....nothing...expand search, nothing. Hmm?
Ah I need to do the "Tracking Log explorer" on the Edge server....strange thougth they were kinda working together, guess I was wrong. Atleast give me the option to search another exchange server.
Ok, Search log on edge....nothing, Hmm?
Ah, log only goes 1 month back. Great.
Rant off.
So question is, is there anyway I can see what email address that was used as recipient address without digging up backups? (kinda weird you cant see what address people use to send you emails)
April 28th, 2012 5:32pm
Hi,
yes this is possible please check the message headerr in orer to get this information.
A description how to show up the message headerr using Outlook 2010:
http://benosullivan.co.uk/windows/how-to-view-email-headers-in-outlook-2010/
regards Thomas Paetzold visit my blog on: http://sus42.wordpress.com
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 5:35pm
Isnt "Message Header"="Message Details" in OWA?
/Edit
Well, in "Message Details" is "Intermet Mail Header" , but as I said above I already looked there :(
April 28th, 2012 5:38pm
On Sat, 24 Mar 2012 19:23:02 +0000, allonone wrote:
>Ya, so ?
So blind is blind.
>It wasnt me in first place wanting to hide the address, it was the sender. And if I should like to copy a mail to someone then I will send all kind of information, your argument could hold for any info in header and in body etc. Its at bit off-track.
>
>Still there is no reason for exchange, that i heard of, not to write your receving mailaddress in header if you got it via Bcc.
Nor is there a reason for it to do so.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 5:39pm
On Thu, 22 Mar 2012 07:16:53 +0000, allonone wrote:
>On Wed, 21 Mar 2012 22:12:28 +0000, allonone wrote: > Why would you need to see that in the message headers? So I can see what email address was used. It's in the RCPT TO command. You'll find it in the SMTP protocol logs. --- Rich Matheisen MCSE+I, Exchange
MVP
>--- Rich Matheisen MCSE+I, Exchange MVP
>
>I know,but its not available to the user.
>
>There is no reason not to include the recipient address. You already have the cc field in the header.
And if you send a copy of the message to someone you've disclosed the
recipient. IOW, it's no longer "blind".
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
April 28th, 2012 5:45pm
On Wed, 21 Mar 2012 10:09:45 +0000, allonone wrote:
>Well, I know ALL Bcc recipient is hidden, and I dont care, except it would be meanig full to be able to watch YOUR own recipient address in message header.
>
>Can you make exchange add that information to a mail?
No. By doing so the "blind" part of "Bcc" is foiled. If the message is
in your mailbox it was addressed to you. Why would you need to see
that in the message headers?
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 5:55pm
I could also refrase question.
Is there any why I can make my (edge)Exchange server pass on recipient address to the mail header when I get mails, including when receiving address is in BCC field?
(I know I cant see other recipient, I only want to see there used email address)
April 28th, 2012 5:56pm
Hi,
you checked but you dontget the desired information?
If yo want to check the messages processed by the HUB Transportserrver then use the exchange shell and the command
get-messaagetrackinglog -recipient <recipient> -start <start date> -end <end date>
in order to get all messages to the recipient and the sender of these mails.
regards Thomas Paetzold visit my blog on: http://sus42.wordpress.com
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 6:01pm
I forgot before, thanks for trying to help.
I did not get the desired information in internet message header.
About shell commands, I belive you can do same in gui and log only goes one month back.
If recipient/user is in BCC, the recipient/user cant view the address used, correct me if im wrong.
Can you make recipient address apear in internet message header or in the "To" field instead of username/primary address?
April 28th, 2012 6:21pm
Why would you need to see
that in the message headers?
So I can see what email address was used.
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 6:23pm
Are you sure you didnt see it in the header? I have mutliple email domains for my account and just tested sending to my secondary email address and I'm able to see that in the header. Now for internal mapi emails you won't since it will resolve to the
primary email address but for external it will show the original envelopment recipient address. Are you doing any address re-writing on the edge?James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
April 28th, 2012 6:26pm
Marking this as resolved (though it isnt).
About Bcc:
If you receive a mail where sender put you in Bcc, then recipient can NOT see what recipient-address was used, maybe you have more than one email address.
Administrator can see email address using Tracking Log Explorer, if log still exist.
If noone is put into "To" then "From" address will also appear in "To".
About secoundary address:
If recipient-address is put into "To" or "Cc" then recpient-address can be seen in Internet Mail Headers, also if it is a secoundary address.
Logically there is no reason to hide the recipient-address from the recipient just because sender desides to put it in Bcc.
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 7:12pm
Thanks for testing.
But I do not see the secondary email (or primary) in header.
I did some testing now myself after your test, and you are right, I can see secondary mail at "To:" in header.
But aparently this email I started out with has not that info, and here comes the funny part, it is a mail send from microsoft.com (and it is a legit mail, no spoof).
It is starting to get late here, and cant come up with a test that could tell me how this is happening.
Maybe ill do some more testing when I know what test could give some info.
April 28th, 2012 7:21pm
argh,getting late.
I wasnt clear about the mail that had missing info.
There is a "To:" field in the mail, but it isnt my info, its senders mail address.
Senders mail address is also in "From:" field.
So I figure she has send a mail with herself in "To:" and the rest of the recipient in the BCC field. but I cant be sure.....hmm and now I writeing about , its probaly some mail system / crm.
If someone from Microsoft wants the header i will be happy to send it.
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 7:35pm
Received: from b1tmg01.b1.local (192.168.2.1) by b1exch01.b1.local
(192.168.2.3) with Microsoft SMTP Server (TLS) id 14.1.355.2; Fri, 16 Dec
2011 15:00:07 +0100
Received: from DB3EHSOBE002.bigfish.com (213.199.154.140) by mail.mymaildomain.dk
(192.168.1.10) with Microsoft SMTP Server id 14.1.355.2; Fri, 16 Dec 2011
14:59:32 +0100
Received: from mail47-db3-R.bigfish.com (10.3.81.254) by
DB3EHSOBE002.bigfish.com (10.3.84.22) with Microsoft SMTP Server id
14.1.225.23; Fri, 16 Dec 2011 13:59:31 +0000
Received: from mail47-db3 (localhost [127.0.0.1]) by mail47-db3-R.bigfish.com
(Postfix) with ESMTP id E4756240530; Fri, 16 Dec 2011 13:59:40 +0000 (UTC)
X-SpamScore: -6
X-BigFish: VS-6(zzc89bh13e6Kc85dh62a3Kzz1202hzz8275bh8275dhz2fh54h49h2a8h668h839h35h)
X-Forefront-Antispam-Report: CIP:131.107.125.8;KIP:(null);UIP:(null);IPV:NLI;H:TK5EX14HUBC101.redmond.corp.microsoft.com;RD:none;EFVD:NLI
X-FB-SS: 13,
Received-SPF: pass (mail47-db3: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8;
envelope-from=anno@microsoft.com; helo=TK5EX14HUBC101.redmond.corp.microsoft.com ;icrosoft.com ;
Received: from mail47-db3 (localhost.localdomain [127.0.0.1]) by mail47-db3
(MessageSwitch) id 1324043980151917_31727; Fri, 16 Dec 2011 13:59:40 +0000
(UTC)
Received: from DB3EHSMHS008.bigfish.com (unknown [10.3.81.243]) by
mail47-db3.bigfish.com (Postfix) with ESMTP id 7129F4E0044; Fri, 16 Dec 2011
13:59:39 +0000 (UTC)
Received: from TK5EX14HUBC101.redmond.corp.microsoft.com (131.107.125.8) by
DB3EHSMHS008.bigfish.com (10.3.87.108) with Microsoft SMTP Server (TLS) id
14.1.225.23; Fri, 16 Dec 2011 13:59:25 +0000
Received: from DB3EX14HUBC301.europe.corp.microsoft.com (10.166.18.181) by
TK5EX14HUBC101.redmond.corp.microsoft.com (157.54.7.153) with Microsoft SMTP
Server (TLS) id 14.2.247.5; Fri, 16 Dec 2011 05:59:10 -0800
Received: from DB3EX14MBXC302.europe.corp.microsoft.com ([169.254.2.154]) by
DB3EX14HUBC301.europe.corp.microsoft.com ([10.166.18.181]) with mapi id
14.01.0339.002; Fri, 16 Dec 2011 13:58:58 +0000
From: =?iso-8859-1?Q?Anette_N=F8rgaard?= <anno@microsoft.com>
To: =?iso-8859-1?Q?Anette_N=F8rgaard?= <anno@microsoft.com>
Subject: Bizspark nyt
Thread-Topic: Bizspark nyt
Thread-Index: Acy7dzHvgNbzUxxBQ5SR0+1KzYvNiw==
Date: Fri, 16 Dec 2011 13:58:57 +0000
Message-ID: <06D621FCB9C10A478813FC22D162070C20E07486@DB3EX14MBXC302.europe.corp.microsoft.com>
Accept-Language: da-DK, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [10.166.18.102]
Content-Type: multipart/related;
boundary="_011_06D621FCB9C10A478813FC22D162070C20E07486DB3EX14MBXC302e_";
type="multipart/alternative"
MIME-Version: 1.0
Return-Path: anno@microsoft.com
X-MS-Exchange-Organization-AVStamp-Mailbox: MSFTFF;1;0;0 0 0
X-MS-Exchange-Organization-AuthSource: b1tmg01.b1.local
X-MS-Exchange-Organization-AuthAs: Anonymous
Hi again.
Above is the header, I changed my real mail domain name in text, but thats it.
April 28th, 2012 8:38pm
"BCC" mail tracking in exchange organization is not possible. If you want to check the BCC receipient then just go an open the Microsoft ticket because that option is not avaialable for Exchange Administrators.
They can check this bcc recipients by using them internal tool.
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 9:58pm
On Wed, 21 Mar 2012 22:12:28 +0000, allonone wrote:
> Why would you need to see that in the message headers? So I can see what email address was used.
It's in the RCPT TO command. You'll find it in the SMTP protocol logs.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
April 28th, 2012 10:00pm
On Fri, 23 Mar 2012 07:30:47 +0000, allonone wrote:
>And if you send a copy of the message to someone you've disclosed the recipient. IOW, it's no longer "blind". --- Rich Matheisen MCSE+I, Exchange MVP
>--- Rich Matheisen MCSE+I, Exchange MVP
>
>Im not sure I understand you.
>
>If I send mail to someone, then they will see my primary mail anyway.
But that wasn't your concern, was it? You wanted to know the SMTP
address used to address the message. If it was a Bcc to a secondary
address you'd be disclosing the secondary.
>And header doesnt include all past recipients, so yes it would still be "blind".
I said if you send a copy of the message, not if you forward the
message. The original headers will be in the message.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2012 10:09pm
Ok, think Im uptodate with what is happening now.
If a sender leaves "To:" blank, and only use Bcc. then recipient mail-head contains senders mail address in the "To:" data, same data as in "From:"
So recipient has cant see what mail is used.
Message tracking log hold the information though....if, as in my case, log not gone.
Seems pretty stupid that information is not availeable to user.
If secoundary address is used it can be seen in header, not in mail itself.
April 28th, 2012 11:35pm
hi,
This can improve the security, so you can't see the bcc in the message header.
If your issue have been fixed, please remember to mark as answer.
Hope can help you
thanks,
CastinLu
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
April 29th, 2012 2:04am
On Wed, 21 Mar 2012 22:12:28 +0000, allonone wrote:
> Why would you need to see that in the message headers? So I can see what email address was used.
It's in the RCPT TO command. You'll find it in the SMTP protocol logs.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
I know,but its not available to the user.
There is no reason not to include the recipient address. You already have the cc field in the header.
April 29th, 2012 3:27am
And if you send a copy of the message to someone you've disclosed the
recipient. IOW, it's no longer "blind".
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Im not sure I understand you.
If I send mail to someone, then they will see my primary mail anyway.
And header doesnt include all past recipients, so yes it would still be "blind".
Free Windows Admin Tool Kit Click here and download it now
April 29th, 2012 3:43am
Well, I know ALL Bcc recipient is hidden, and I dont care, except it would be meanig full to be able to watch YOUR own recipient address in message header.
Can you make exchange add that information to a mail?
April 29th, 2012 6:19am