Dears, can I check the attachment file extension (.rar,.zip.....) in the messages that is sent from particular user , from powershell or EMC. I tried get-messsagetrackinglog , but ot looks like there is no option for attachment is there anyway to check !!! Best Regards,

Hi Ramos, I don't think is possible as the attachment of a message is "embedded" in the body of the email (after the "data" argument has been passed during SMTP communication) Br,

Hi,It is possible by add-attachmentfilterentry on cmdlet. See here details http://technet.microsoft.com/en-us/library/bb123931(EXCHG.80).aspx Regards from www.windowsadmin.info [If this answer helps you to resolve the issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. This will help others to find the answers faster]