Emails showing up as external from Exchange Online to Exchange 2013 On-Premises

%3CLINGO-SUB%20id%3D%22lingo-sub-354933%22%20slang%3D%22en-US%22%3EEmails%20showing%20up%20as%20external%20from%20Exchange%20Online%20to%20Exchange%202013%20On-Premises%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-354933%22%20slang%3D%22en-US%22%3E%3CDIV%20class%3D%22thread-message-content-body-text%20thread-full-message%22%3E%3CP%20class%3D%22x-hidden-focus%22%3EWe%20are%20running%20Exchange%202013%20CU21%26nbsp%3B%20in%20Hybrid%20mode.%20Emails%20from%20Exchange%20Online%20users%20to%20Exchange%20On-Premises%20users%20is%20showing%20up%20as%20external.%26nbsp%3B%26nbsp%3BTransport%20rules%20that%20are%20supposed%20to%20apply%20only%20to%20external%20emails%20where%20%22the%20sender%20is%20located%22%20%22Outside%20the%20organization%22%20are%20erroneously%20being%20applied%20to%20emails%20that%20Exchange%20Online%20users%20are%20sending%20to%20the%20On-Premises%20users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20the%20emails%20from%20On-Premises%20users%20to%20Exchange%20Online%20users%20are%20showing%20up%20correctly%20as%20internal.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22x-hidden-focus%22%3EThe%20header%20%22X-MS-Exchange-Organization-AuthAs%3A%20Anonymous%22%20is%20found%20in%20emails%20from%20Exchange%20Online%20to%20Exchange%202013%20On-Premises%20users.%20When%20the%20emails%20are%20sent%20from%20Exchange%202013%20On-Premises%20users%20to%20Exchange%20Online%20users%2C%20the%20header%20in%20the%20emails%20is%20%22X-MS-Exchange-Organization-AuthAs%3A%20Internal%22.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20do%20I%20fix%20this%2C%20so%20that%20the%20emails%26nbsp%3Bare%20showing%20as%20internal%20both%20ways%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you.%3C%2FP%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-354933%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHybrid%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOn-Premises%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-356149%22%20slang%3D%22en-US%22%3ERe%3A%20Emails%20showing%20up%20as%20external%20from%20Exchange%20Online%20to%20Exchange%202013%20On-Premises%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-356149%22%20slang%3D%22en-US%22%3E%3CP%3ETry%20to%20use%20this%20tool%3A%20%3CA%20href%3D%22https%3A%2F%2Fivasoft.com%2Ftagexternal.shtml%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3ETagExternal%3C%2FA%3Einstead%20of%20the%20transport%20rule.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-354935%22%20slang%3D%22en-US%22%3ERe%3A%20Emails%20showing%20up%20as%20external%20from%20Exchange%20Online%20to%20Exchange%202013%20On-Premises%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-354935%22%20slang%3D%22en-US%22%3E%3CDIV%20class%3D%22thread-message-content-body-text%20thread-full-message%22%3E%3CP%3EPS%20C%3A%5CUsers%5C%26gt%3B%20get-remotedomain%20CompanyName.com%7Cfl%3C%2FP%3E%3CP%3EDomainName%20%3A%20CompanyName.com%3CBR%20%2F%3EIsInternal%20%3A%20True%3CBR%20%2F%3ETargetDeliveryDomain%20%3A%20True%3CBR%20%2F%3EByteEncoderTypeFor7BitCharsets%20%3A%20Undefined%3CBR%20%2F%3ECharacterSet%20%3A%3CBR%20%2F%3ENonMimeCharacterSet%20%3A%3CBR%20%2F%3EAllowedOOFType%20%3A%20InternalLegacy%3CBR%20%2F%3EAutoReplyEnabled%20%3A%20True%3CBR%20%2F%3EAutoForwardEnabled%20%3A%20True%3CBR%20%2F%3EDeliveryReportEnabled%20%3A%20True%3CBR%20%2F%3ENDREnabled%20%3A%20True%3CBR%20%2F%3EMeetingForwardNotificationEnabled%20%3A%20True%3CBR%20%2F%3EContentType%20%3A%20MimeHtmlText%3CBR%20%2F%3EDisplaySenderName%20%3A%20True%3CBR%20%2F%3EPreferredInternetCodePageForShiftJis%20%3A%20Undefined%3CBR%20%2F%3ERequiredCharsetCoverage%20%3A%3CBR%20%2F%3ETNEFEnabled%20%3A%20True%3CBR%20%2F%3ELineWrapSize%20%3A%20Unlimited%3CBR%20%2F%3ETrustedMailOutboundEnabled%20%3A%20True%3CBR%20%2F%3ETrustedMailInboundEnabled%20%3A%20True%3CBR%20%2F%3EUseSimpleDisplayName%20%3A%20False%3CBR%20%2F%3ENDRDiagnosticInfoEnabled%20%3A%20True%3CBR%20%2F%3EMessageCountThreshold%20%3A%202147483647%3CBR%20%2F%3EAdminDisplayName%20%3A%3CBR%20%2F%3EExchangeVersion%20%3A%200.1%20(8.0.535.0)%3CBR%20%2F%3EName%20%3A%20CompanyName.com%3CBR%20%2F%3EDistinguishedName%20%3A%20CN%3DCompanyName.com%2CCN%3DInternet%20Message%20Formats%2CCN%3DGlobal%20Settings%2CCN%3DConfiguration%2CCN%3DCompanyName0.onmicrosoft.com%2CCN%3DConfigurationUnits%2CDC%3DNAMPR25C003%2CDC%3DPROD%2CDC%3DOUTLOOK%2CDC%3DCOM%3CBR%20%2F%3EIdentity%20%3A%20CompanyName.com%3CBR%20%2F%3EObjectCategory%20%3A%20NAMPR25C003.PROD.OUTLOOK.COM%2FConfiguration%2FSchema%2Fms-Exch-Domain-Content-Config%3CBR%20%2F%3EObjectClass%20%3A%20%7Btop%2C%20msExchDomainContentConfig%7D%3CBR%20%2F%3EWhenChanged%20%3A%202%2F21%2F2019%2011%3A20%3A58%20AM%3CBR%20%2F%3EWhenCreated%20%3A%202%2F19%2F2019%202%3A46%3A14%20PM%3CBR%20%2F%3EWhenChangedUTC%20%3A%202%2F21%2F2019%204%3A20%3A58%20PM%3CBR%20%2F%3EWhenCreatedUTC%20%3A%202%2F19%2F2019%207%3A46%3A14%20PM%3CBR%20%2F%3EOrganizationId%20%3A%20NAMPR25C003.PROD.OUTLOOK.COM%2FMicrosoft%20Exchange%20Hosted%20Organizations%2FCompanyName0.onmicrosoft.com%20-%20NAMPR25C003.PROD.OUTLOOK.COM%2FConfigurationUnits%2FCompanyName0.onmicrosoft.com%2FConfiguration%3CBR%20%2F%3EId%20%3A%20CompanyName.com%3CBR%20%2F%3EOriginatingServer%20%3A%20CM5PR12A005DC08.NAMPR25C003.PROD.OUTLOOK.COM%3CBR%20%2F%3EIsValid%20%3A%20True%3CBR%20%2F%3EObjectState%20%3A%20Unchanged%3C%2FP%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

We are running Exchange 2013 CU21  in Hybrid mode. Emails from Exchange Online users to Exchange On-Premises users is showing up as external.  Transport rules that are supposed to apply only to external emails where "the sender is located" "Outside the organization" are erroneously being applied to emails that Exchange Online users are sending to the On-Premises users.

 

However, the emails from On-Premises users to Exchange Online users are showing up correctly as internal.

 

The header "X-MS-Exchange-Organization-AuthAs: Anonymous" is found in emails from Exchange Online to Exchange 2013 On-Premises users. When the emails are sent from Exchange 2013 On-Premises users to Exchange Online users, the header in the emails is "X-MS-Exchange-Organization-AuthAs: Internal". 

 

How do I fix this, so that the emails are showing as internal both ways?

 

Thank you.

2 Replies
Highlighted

PS C:\Users\> get-remotedomain CompanyName.com|fl

DomainName : CompanyName.com
IsInternal : True
TargetDeliveryDomain : True
ByteEncoderTypeFor7BitCharsets : Undefined
CharacterSet :
NonMimeCharacterSet :
AllowedOOFType : InternalLegacy
AutoReplyEnabled : True
AutoForwardEnabled : True
DeliveryReportEnabled : True
NDREnabled : True
MeetingForwardNotificationEnabled : True
ContentType : MimeHtmlText
DisplaySenderName : True
PreferredInternetCodePageForShiftJis : Undefined
RequiredCharsetCoverage :
TNEFEnabled : True
LineWrapSize : Unlimited
TrustedMailOutboundEnabled : True
TrustedMailInboundEnabled : True
UseSimpleDisplayName : False
NDRDiagnosticInfoEnabled : True
MessageCountThreshold : 2147483647
AdminDisplayName :
ExchangeVersion : 0.1 (8.0.535.0)
Name : CompanyName.com
DistinguishedName : CN=CompanyName.com,CN=Internet Message Formats,CN=Global Settings,CN=Configuration,CN=CompanyName0.onmicrosoft.com,CN=ConfigurationUnits,DC=NAMPR25C003,DC=PROD,DC=OUTLOOK,DC=COM
Identity : CompanyName.com
ObjectCategory : NAMPR25C003.PROD.OUTLOOK.COM/Configuration/Schema/ms-Exch-Domain-Content-Config
ObjectClass : {top, msExchDomainContentConfig}
WhenChanged : 2/21/2019 11:20:58 AM
WhenCreated : 2/19/2019 2:46:14 PM
WhenChangedUTC : 2/21/2019 4:20:58 PM
WhenCreatedUTC : 2/19/2019 7:46:14 PM
OrganizationId : NAMPR25C003.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations/CompanyName0.onmicrosoft.com - NAMPR25C003.PROD.OUTLOOK.COM/ConfigurationUnits/CompanyName0.onmicrosoft.com/Configuration
Id : CompanyName.com
OriginatingServer : CM5PR12A005DC08.NAMPR25C003.PROD.OUTLOOK.COM
IsValid : True
ObjectState : Unchanged

Highlighted

Try to use this tool: TagExternal instead of the transport rule.