Email is being delivered to mailboxes that it was not sent to

[lmnjones]

I have a client that is having an issue. Mails that are sent to someone
(anyone) may be copied to internal Exchange users for no apparent reason.
Obviously, this has the client worried that confidential email might get
randomly sent to people that should not see it. Anyone ever run into this?
I've been administering Exchange for over 10 years and this is a new one.
To clarify with an example: Sue sends an email to Joe (internal or external,
makes no difference) and Joe gets it but so do Jack, Jill, Bob and maybe a
few other internal users also get it.
Message tracking shows it being delivered internally to random users, but I
can't figure out why.

 

[Dyadmin]

is forwarding turned on??

 

[RichardHuang]

Can this problem be-reproduced? Does this happen to multiple users? It sounds forwarding is turned on or users wrong operation.

 

[58sniper]

journaling? Delegates?

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[DanMIS]

Just grasping, but online you can find a script that will list all of the delegates in your organization AD. I would run that script to see if it points to why people are getting mail they weren't expected to get.

Check this link, it's a different script than I used but should work.

http://techtasks.com/code/viewbookcode/1244

Dan

CCA Citrix 4.0
MCSA: Messaging 2003

 

[lmnjones]

Sorry, for the delay I was out. On the forwarding question, the short answer is no, there is no forwarding in place. The problem cannot be consistently reproduced but it has happened twice, that has been noticed, in 2 weeks. This is a small organization with a very high email volume. There are a couple of people that utilize delegates, but they have not had this happen to them. I'll have to check on the journaling, but the affected users are different each time, so, unles random users are turning it on and then off again, I don't think that is the issue.
I'll take a look at the script and see if it show some configuration that I am not aware of.

 

[lmnjones]

I used the script against the 2 users that have had it happen to them and they have no delegates nor are they a delegate for anyone.

 

[DanMIS]

The next place I would look is in message tracking.

CCA Citrix 4.0
MCSA: Messaging 2003

 

[DanMIS]

I came across this while researching something else. It may help.

http://gsexdev.blogspot.com/2005/10/reporting-on-forwarding-rules-in.html

Dan

CCA Citrix 4.0
MCSA: Messaging 2003