Forum Discussion
Weird behavior with iPhones, Exchange Online, and built-in email? (sending phantom emails?)
We are seeing some strange behavior that I am not able to explain. Specifically, it seems to be only impacting users that are using the built-in email client on iPhones.
Some symptoms:
- Meetings (often from years past or even cancelled) are reforwarded to meeting attendees
- Forwarded Emails (the users swear up and down they didnt do it, or werent even messing around on the device at the time)
We've tried to chalk this up to user error, but it is happening at a clip now that is getting a bit worrisome.
Is anyone aware of issues that might be causing this. We are investigating InTune, and the possibility of turning off access via the built-in client. But if there are known issues or others have experienced anything similar, that might speed things up.
Doing authentication analysis and message traces shows that it doesnt look like any malicious activity is occuring, emails are coming from their devices and are internally sent, users are often worried they have been hacked.
The iPhones built in mail/calendar apps for a long time have been very buggy. In our organization we tell users to use the OWA client and NOT the built in client for e-mail. If they just can't do that we tell them to never, ever, manipulate a calendar item. Opening is just fine, but any change/declines/accepts cause many issues.
Raise a support case with Microsoft. Also, can you disable calendar reparing on one of the user's mailbox to see if that helps from meeting invites being forwarded. Also, make sure users don't have any rule configured to autoforward the email.
Raise a support case, they have some documents internally tracking the latest experiments Apple and the other 3rd party ActiveSync vendors have done.
There's a public list as well, but the last entry there is from April: https://support.microsoft.com/en-us/help/2563324/current-issues-with-microsoft-exchange-activesync-and-third-party-devi
