Home All Groups Group Topic Archive Search About

where are emails coming from

Author
12 Dec 2008 2:58 PM
Dan
Hello everyone,

If anyone is interested in helping me find a needle in a haystack then I'd
much appreciate it. I have a fe/be exchange 2003 environment. I have an
account set up holdingcell which has an email address of
holdingc***@domain.com. The last administrator must have set it up, i'm
thinking as a catch all, but I can't find anywhere that this email is
configured. There is 18,000 emails in this holdingcell mailbox and I can't
determine where these emails are coming from. I've queried AD,
(&(objectCategory=person)(objectClass=user)(mail=*)( altRecipient=*)), for
any accounts that have forwarding set and looked at the results and did not
find any accounts that are forwarding to holdingc***@domain.com. I've looked
in the SMTP properties on the fe and be VS and did not find
holdingc***@domain.com configured for sending NDRs or forward all mail with
unresolved recipients. I am at a loss for where this email account could be
configured.

Does any one have any suggestions to point me in the right direction? Does
anyone know how if the message tracking center would be helpful in this case?

I can log into OWA using the holdingcell credentials and view all the email.
Email is in there from everyday and I can not determine where the emails
would be coming from because there's no common denominater that I see.

Thanks in advanced,
Dan

Author
12 Dec 2008 4:38 PM
John Oliver, Jr. [MVP]
Message Tracking would definitely help you see where the messages are coming
from.  I find it really strange you can login to OWA with HoldingCell
credentials but yet cannot find the user account in AD?

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2009
Microsoft Certified Partner


Show quoteHide quote
"Dan" <D**@discussions.microsoft.com> wrote in message
news:6D72A136-5E15-489F-AAA5-D984F5E12B81@microsoft.com...
> Hello everyone,
>
> If anyone is interested in helping me find a needle in a haystack then I'd
> much appreciate it. I have a fe/be exchange 2003 environment. I have an
> account set up holdingcell which has an email address of
> holdingc***@domain.com. The last administrator must have set it up, i'm
> thinking as a catch all, but I can't find anywhere that this email is
> configured. There is 18,000 emails in this holdingcell mailbox and I can't
> determine where these emails are coming from. I've queried AD,
> (&(objectCategory=person)(objectClass=user)(mail=*)( altRecipient=*)), for
> any accounts that have forwarding set and looked at the results and did
> not
> find any accounts that are forwarding to holdingc***@domain.com. I've
> looked
> in the SMTP properties on the fe and be VS and did not find
> holdingc***@domain.com configured for sending NDRs or forward all mail
> with
> unresolved recipients. I am at a loss for where this email account could
> be
> configured.
>
> Does any one have any suggestions to point me in the right direction? Does
> anyone know how if the message tracking center would be helpful in this
> case?
>
> I can log into OWA using the holdingcell credentials and view all the
> email.
> Email is in there from everyday and I can not determine where the emails
> would be coming from because there's no common denominater that I see.
>
> Thanks in advanced,
> Dan
Author
15 Dec 2008 9:58 PM
Dan
I *can* find the user account in AD. What I can't find is the account that is
forwarding to this holdingcell account, if it is even that where these emails
are coming from.

Looking at the message tracking center shows the emails from different
system accounts going to the people that are suppose to get them but also the
holdingcell account and I know its not configured to do that. Something in
exchange environment is sending to this account. What I have noticed is if
the email is going to a group and that group has a disabled user in it then
that particular email always gets sent to holdingcell also. strange?



Show quoteHide quote
"John Oliver, Jr. [MVP]" wrote:

> Message Tracking would definitely help you see where the messages are coming
> from.  I find it really strange you can login to OWA with HoldingCell
> credentials but yet cannot find the user account in AD?
>
> --
> John Oliver, Jr
> MCSE, MCT, CCNA
> Exchange MVP 2009
> Microsoft Certified Partner
>
>
> "Dan" <D**@discussions.microsoft.com> wrote in message
> news:6D72A136-5E15-489F-AAA5-D984F5E12B81@microsoft.com...
> > Hello everyone,
> >
> > If anyone is interested in helping me find a needle in a haystack then I'd
> > much appreciate it. I have a fe/be exchange 2003 environment. I have an
> > account set up holdingcell which has an email address of
> > holdingc***@domain.com. The last administrator must have set it up, i'm
> > thinking as a catch all, but I can't find anywhere that this email is
> > configured. There is 18,000 emails in this holdingcell mailbox and I can't
> > determine where these emails are coming from. I've queried AD,
> > (&(objectCategory=person)(objectClass=user)(mail=*)( altRecipient=*)), for
> > any accounts that have forwarding set and looked at the results and did
> > not
> > find any accounts that are forwarding to holdingc***@domain.com. I've
> > looked
> > in the SMTP properties on the fe and be VS and did not find
> > holdingc***@domain.com configured for sending NDRs or forward all mail
> > with
> > unresolved recipients. I am at a loss for where this email account could
> > be
> > configured.
> >
> > Does any one have any suggestions to point me in the right direction? Does
> > anyone know how if the message tracking center would be helpful in this
> > case?
> >
> > I can log into OWA using the holdingcell credentials and view all the
> > email.
> > Email is in there from everyday and I can not determine where the emails
> > would be coming from because there's no common denominater that I see.
> >
> > Thanks in advanced,
> > Dan
>
Author
15 Dec 2008 10:15 PM
Dan
I found it!! .. There *were* AD accounts forwarding to the holdingcell
account. These accounts that were configured to send email to holding cell
were user templates for employees in each OU. being that they were part of
email groups these template accounts mailboxes where growing and email never
deleted. So, on the user template accounts I forwarded email to the holding
cell account and ran mailbox maintence on the holding cell mailboxes to
delete anything in there over 14 days. Why not run it on the template
accounts, because i wanted the template accounts to be in the mailstore where
the new user's mailbox should reside and I do have a longer "delete anything
over" time period configured.

At any rate... thank you John for shoving me to look into message tracking.

Show quoteHide quote
"Dan" wrote:

> I *can* find the user account in AD. What I can't find is the account that is
> forwarding to this holdingcell account, if it is even that where these emails
> are coming from.
>
> Looking at the message tracking center shows the emails from different
> system accounts going to the people that are suppose to get them but also the
> holdingcell account and I know its not configured to do that. Something in
> exchange environment is sending to this account. What I have noticed is if
> the email is going to a group and that group has a disabled user in it then
> that particular email always gets sent to holdingcell also. strange?
>
>
>
> "John Oliver, Jr. [MVP]" wrote:
>
> > Message Tracking would definitely help you see where the messages are coming
> > from.  I find it really strange you can login to OWA with HoldingCell
> > credentials but yet cannot find the user account in AD?
> >
> > --
> > John Oliver, Jr
> > MCSE, MCT, CCNA
> > Exchange MVP 2009
> > Microsoft Certified Partner
> >
> >
> > "Dan" <D**@discussions.microsoft.com> wrote in message
> > news:6D72A136-5E15-489F-AAA5-D984F5E12B81@microsoft.com...
> > > Hello everyone,
> > >
> > > If anyone is interested in helping me find a needle in a haystack then I'd
> > > much appreciate it. I have a fe/be exchange 2003 environment. I have an
> > > account set up holdingcell which has an email address of
> > > holdingc***@domain.com. The last administrator must have set it up, i'm
> > > thinking as a catch all, but I can't find anywhere that this email is
> > > configured. There is 18,000 emails in this holdingcell mailbox and I can't
> > > determine where these emails are coming from. I've queried AD,
> > > (&(objectCategory=person)(objectClass=user)(mail=*)( altRecipient=*)), for
> > > any accounts that have forwarding set and looked at the results and did
> > > not
> > > find any accounts that are forwarding to holdingc***@domain.com. I've
> > > looked
> > > in the SMTP properties on the fe and be VS and did not find
> > > holdingc***@domain.com configured for sending NDRs or forward all mail
> > > with
> > > unresolved recipients. I am at a loss for where this email account could
> > > be
> > > configured.
> > >
> > > Does any one have any suggestions to point me in the right direction? Does
> > > anyone know how if the message tracking center would be helpful in this
> > > case?
> > >
> > > I can log into OWA using the holdingcell credentials and view all the
> > > email.
> > > Email is in there from everyday and I can not determine where the emails
> > > would be coming from because there's no common denominater that I see.
> > >
> > > Thanks in advanced,
> > > Dan
> >