none
purported email from Microsoft

    Question

  • How do I forward a series of emails I keep getting from "Microsoft" to determine if it's authentic.  The address seems legit as it is part of Live.com
    Sunday, August 20, 2017 9:26 PM

All replies

  • This Is a forum for technical support for Exchange Server 2013, not for determining whether what you're getting from "Microsoft" is authentic.  But if there's any question, assume that they're not.

    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Celebrating 20 years of providing Exchange peer support!

    Sunday, August 20, 2017 10:18 PM
    Moderator
  • Hi,

    Thanks for contacting our forum.

    Do you have antispam agent installed on your Exchange server? And if you’ve configured the SPF check for your Exchange environment.

    These configurations should protect you from antispam and spoofing emails arriving.

    Have you check the message header of the emails from live.com? Where they are from?

    You can also check the message tracking log to see the detailed message of the source of these messages with the command below:

    Get-MessageTrackingLog –ResultSize Unlimited –Start "08/16/2017 2:30PM" –End “08/21/2015 3:30PM" –Sender "sender@toso.com"  -MessageSubject "subject"| fl >c:\MTL.txt

    Hope it helps.


    Regards,

    Jason Chao


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, August 21, 2017 3:11 AM
    Moderator