Jan 29 2019 04:58 PM
Jan 29 2019 04:58 PM
I have a user who receives most mail just fine. But some senders never get a message deliverd to said user.
Note, this is a normal user mailbox, it is NOT a group, however, the message trace is indicating the status as "expanded" and delivered to the group, and then names the "group" it's delivered to as the users normal mailbox (It's not a group)
Jan 29 2019 11:45 PM
Run a message trace and post the sanitized results here: https://docs.microsoft.com/en-us/office365/securitycompliance/message-trace-scc
Feb 02 2019 09:07 AM
You should have checked the details for the second entry there, the one with the Expand DL action. And you do have a Redirect event prior to that, which you should check as well.
Feb 04 2019 10:36 AM - edited Feb 04 2019 10:51 AM
I have seen those, and they do not provide any information.
The redirect detail is this "Redirect message. No detail information available".
The second message I assume you are referring to is the Expand DL "The message was sent to a distribution list (DL) That was expanded to the recipients of the DL"
This is the problem, the so called distribution list it's expanding to is NOT a distribution list and there is no detail in the message trace.
Like I said, the message trace is telling me it's being sent to a group that does not exist.
See below, I have changed the actual recipient to firstname.lastname@example.org, which is a normal user mailbox, however, the message is telling me it's being delivered to the the group "email@example.com", which is not a group, it is the users mailbox. Who never recieves the message.
The message was sent to the following group: firstname.lastname@example.org. Office 365 received the message and sent it to the group members.
Feb 04 2019 11:16 PM
I get what you're saying, but I also see what's on that screenshot and when there is an Expand event, usually a group is involved. Check the async message trace, it might reveal some additional details. And you can always open a support case and have this properly investigated.
Sep 17 2019 12:25 PM
I realize this is old.
We're having the exact same issue.
An email was sent to an internal user from an external user. The internal user did not receive the message. Search results show the message was expanded to a group. The group name is the internal users' email address. Their primary email address. There is NO group remotely similar to the email address that Office 365 says the message was originally sent to.
Sep 30 2019 01:44 PM
I am having the same issue as well. Message trace says it was expanded and delivered to the recipients of the group, but the email address is not for a group. It is a user's primary address.