Hi Sneff,
Result from Get-transportrule:-
RunspaceId : 7a4877a8-f38d-44da-87c4-49432e7b1392
Priority : 4
DlpPolicy :
DlpPolicyId : 00000000-0000-0000-0000-000000000000
Comments :
ManuallyModified : False
ActivationDate :
ExpiryDate :
Description : If the message:
Is sent to 'support@contonso.com.my'
Take the following actions:
Blind carbon copy(Bcc) the message to 'exchangetest@contonso.com.my'
and Stop processing more rules
RuleVersion : 14.0.0.0
Conditions : {SentTo}
Exceptions :
Actions : {BlindCopyTo, StopRuleProcessing}
State : Enabled
Mode : Enforce
RuleErrorAction : Ignore
SenderAddressLocation : Header
RuleSubType : None
UseLegacyRegex : False
From :
FromMemberOf :
FromScope :
SentTo : {support@contonso.com.my}
SentToMemberOf :
SentToScope :
BetweenMemberOf1 :
BetweenMemberOf2 :
ManagerAddresses :
ManagerForEvaluatedUser :
SenderManagementRelationship :
ADComparisonAttribute :
ADComparisonOperator :
SenderADAttributeContainsWords :
SenderADAttributeMatchesPatterns :
RecipientADAttributeContainsWords :
RecipientADAttributeMatchesPatterns :
AnyOfToHeader :
AnyOfToHeaderMemberOf :
AnyOfCcHeader :
AnyOfCcHeaderMemberOf :
AnyOfToCcHeader :
AnyOfToCcHeaderMemberOf :
HasClassification :
HasNoClassification : False
SubjectContainsWords :
SubjectOrBodyContainsWords :
HeaderContainsMessageHeader :
HeaderContainsWords :
FromAddressContainsWords :
SenderDomainIs :
RecipientDomainIs :
SubjectMatchesPatterns :
SubjectOrBodyMatchesPatterns :
HeaderMatchesMessageHeader :
HeaderMatchesPatterns :
FromAddressMatchesPatterns :
AttachmentNameMatchesPatterns :
AttachmentExtensionMatchesWords :
AttachmentPropertyContainsWords :
ContentCharacterSetContainsWords :
HasSenderOverride : False
MessageContainsDataClassifications :
MessageContainsAllDataClassifications :
SenderIpRanges :
SCLOver :
AttachmentSizeOver :
MessageSizeOver :
WithImportance :
MessageTypeMatches :
RecipientAddressContainsWords :
RecipientAddressMatchesPatterns :
SenderInRecipientList :
RecipientInSenderList :
AttachmentContainsWords :
AttachmentMatchesPatterns :
AttachmentIsUnsupported : False
AttachmentProcessingLimitExceeded : False
AttachmentHasExecutableContent : False
AttachmentIsPasswordProtected : False
AnyOfRecipientAddressContainsWords :
AnyOfRecipientAddressMatchesPatterns :
ExceptIfFrom :
ExceptIfFromMemberOf :
ExceptIfFromScope :
ExceptIfSentTo :
ExceptIfSentToMemberOf :
ExceptIfSentToScope :
ExceptIfBetweenMemberOf1 :
ExceptIfBetweenMemberOf2 :
ExceptIfManagerAddresses :
ExceptIfManagerForEvaluatedUser :
ExceptIfSenderManagementRelationship :
ExceptIfADComparisonAttribute :
ExceptIfADComparisonOperator :
ExceptIfSenderADAttributeContainsWords :
ExceptIfSenderADAttributeMatchesPatterns :
ExceptIfRecipientADAttributeContainsWords :
ExceptIfRecipientADAttributeMatchesPatterns :
ExceptIfAnyOfToHeader :
ExceptIfAnyOfToHeaderMemberOf :
ExceptIfAnyOfCcHeader :
ExceptIfAnyOfCcHeaderMemberOf :
ExceptIfAnyOfToCcHeader :
ExceptIfAnyOfToCcHeaderMemberOf :
ExceptIfHasClassification :
ExceptIfHasNoClassification : False
ExceptIfSubjectContainsWords :
ExceptIfSubjectOrBodyContainsWords :
ExceptIfHeaderContainsMessageHeader :
ExceptIfHeaderContainsWords :
ExceptIfFromAddressContainsWords :
ExceptIfSenderDomainIs :
ExceptIfRecipientDomainIs :
ExceptIfSubjectMatchesPatterns :
ExceptIfSubjectOrBodyMatchesPatterns :
ExceptIfHeaderMatchesMessageHeader :
ExceptIfHeaderMatchesPatterns :
ExceptIfFromAddressMatchesPatterns :
ExceptIfAttachmentNameMatchesPatterns :
ExceptIfAttachmentExtensionMatchesWords :
ExceptIfAttachmentPropertyContainsWords :
ExceptIfContentCharacterSetContainsWords :
ExceptIfSCLOver :
ExceptIfAttachmentSizeOver :
ExceptIfMessageSizeOver :
ExceptIfWithImportance :
ExceptIfMessageTypeMatches :
ExceptIfRecipientAddressContainsWords :
ExceptIfRecipientAddressMatchesPatterns :
ExceptIfSenderInRecipientList :
ExceptIfRecipientInSenderList :
ExceptIfAttachmentContainsWords :
ExceptIfAttachmentMatchesPatterns :
ExceptIfAttachmentIsUnsupported : False
ExceptIfAttachmentProcessingLimitExceeded : False
ExceptIfAttachmentHasExecutableContent : False
ExceptIfAttachmentIsPasswordProtected : False
ExceptIfAnyOfRecipientAddressContainsWords :
ExceptIfAnyOfRecipientAddressMatchesPatterns :
ExceptIfHasSenderOverride : False
ExceptIfMessageContainsDataClassifications :
ExceptIfMessageContainsAllDataClassifications :
ExceptIfSenderIpRanges :
PrependSubject :
SetAuditSeverity :
ApplyClassification :
ApplyHtmlDisclaimerLocation :
ApplyHtmlDisclaimerText :
ApplyHtmlDisclaimerFallbackAction :
ApplyRightsProtectionTemplate :
SetSCL :
SetHeaderName :
SetHeaderValue :
RemoveHeader :
AddToRecipients :
CopyTo :
BlindCopyTo : {exchangetest@contonso.com.my}
AddManagerAsRecipientType :
ModerateMessageByUser :
ModerateMessageByManager : False
RedirectMessageTo :
RejectMessageEnhancedStatusCode :
RejectMessageReasonText :
DeleteMessage : False
Disconnect : False
Quarantine : False
SmtpRejectMessageRejectText :
SmtpRejectMessageRejectStatusCode :
LogEventText :
StopRuleProcessing : True
SenderNotificationType :
GenerateIncidentReport :
IncidentReportContent :
RouteMessageOutboundConnector :
RouteMessageOutboundRequireTls : False
ApplyOME : False
RemoveOME : False
OMEExpiryDays : 0
GenerateNotification :
Identity : Test rule
ImmutableId : 5ee55366-f334-43f7-8051-ff0c1e03c3b4
OrganizationId :
Name : Test
rule
IsValid : True
WhenChanged : 11/9/2019 10:48:52 PM
ExchangeVersion : 0.1 (8.0.535.0)
ObjectState : Unchanged
Get-messagetrackinglog -recipient result:-
RunspaceId : 7a4877a8-f38d-44da-87c4-49432e7b1392
Timestamp : 11/9/2019 10:49:10 PM
ClientIp : ::1
ClientHostname : contonsoEXCHG01
ServerIp :
ServerHostname : contonsoEXCHG01.contonso.com.my
SourceContext : MDB:30e3494e-9f86-406c-a924-65a664869032, Mailbox:341753b4-1cf3-418b-a959-56d09c4ef4cf,
Event:2368656, MessageClass:IPM.Note, CreationTime:2019-11-09T14:49:09.569Z,
ClientType:MOMT, SubmissionAssistant:MailboxTransportSubmissionEmailAssistant
Source : STOREDRIVER
EventId : SUBMIT
InternalMessageId :
Recipients : {support@contonso.com.my}
RecipientStatus : {}
TotalBytes :
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : test email 1049pm
Sender : c@contonso.com.my
ReturnPath :
Directionality : Originating
TenantId :
OriginalClientIp :
MessageInfo : 2019-11-09T14:49:09.569Z;LSRV=contonsoEXCHG01.contonso.com.my:TOTAL-SUB=0.434|SA=0.266|MTSS=0.168(MTSSD
=0.168(MTSSDA=0.003|MTSSDC=0.036|SDSSO=0.115(SMSC=0.005|SMS=0.108)|X-MTSSDPL=0.035|X-MTSSDSS=
0.004))
EventData : {[ItemEntryId, 00-00-00-00-B1-DA-9F-D6-26-CB-E9-42-8E-CA-08-BD-76-08-04-DD-07-00-48-03-FB-CF-
A0-B3-D7-4B-A7-96-B5-28-80-18-3A-0B-00-00-00-00-01-0B-00-00-48-03-FB-CF-A0-B3-D7-4B-A7-96-B5-
28-80-18-3A-0B-00-00-95-18-B8-D2-00-00], [DeliveryPriority, Normal]}
TransportTrafficType : Email
SchemaVersion : 15.01.1591.008
