Forum Discussion
Undelivered message expanded
Run a message trace and post the sanitized results here: https://docs.microsoft.com/en-us/office365/securitycompliance/message-trace-scc
- Jason GaffneyFeb 01, 2019Copper Contributor
Does this help?
It also appears to be flagged as spam, however the sender is allowed an sender.
- VasilMichevFeb 02, 2019MVP
You should have checked the details for the second entry there, the one with the Expand DL action. And you do have a Redirect event prior to that, which you should check as well.
- Jason GaffneyFeb 04, 2019Copper Contributor
I have seen those, and they do not provide any information.
The redirect detail is this "Redirect message. No detail information available".
The second message I assume you are referring to is the Expand DL "The message was sent to a distribution list (DL) That was expanded to the recipients of the DL"
This is the problem, the so called distribution list it's expanding to is NOT a distribution list and there is no detail in the message trace.
Like I said, the message trace is telling me it's being sent to a group that does not exist.
See below, I have changed the actual recipient to fakeuser123@fakedomain.com, which is a normal user mailbox, however, the message is telling me it's being delivered to the the group "fakeuser123@fakedomain.com", which is not a group, it is the users mailbox. Who never recieves the message.
The message was sent to the following group: fakeuser123@fakedomain.com. Office 365 received the message and sent it to the group members.
Group: fakeuser123@fakedomain.com