locked
554 5.6.0 Corrupt message content RRS feed

  • Question

  • Hello,
    we updated Exchange 2016 CU15 -> CU16 (Version 15.1 (Build 1979.3)).
    And sometimes we get email delivery errors:
    Remote Server returned '554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: PromoteCreateReplay]'

    If you resend the email, it will be delivered.
    Please help fix it.

    Tuesday, May 26, 2020 3:53 AM

Answers

  • Hi,

    Did this issue start to occur right after you upgraded to Exchange 2016 CU16?
    Does the same happen regardless of whether the message is sent to internal or external users?
    For the messages that trigger the NDR, have you noticed if they have anything in common, such as if they are all sent with attachments or if a particular recipient is in the To/CC list?

    Please run the cmdlet below for one of the problematic messages and get back to us with the output after removing any personal information involved:

    Get-MessageTrackingLog -MessageSubject <subject> -Sender <mailbox address> -Recipients <mailbox address> |select timestamp,EventID, Source,ConnectorID |sort-object Timestamp 

    Besides, if you have any antivirus software configured in the environment, it’s suggested to try temporarily disabling them to eliminate the issue. 

    Any update, please feel free to post back.

    Regards,

    Yuki Sun


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Wednesday, May 27, 2020 3:14 AM

All replies

  • Hi,

    Did this issue start to occur right after you upgraded to Exchange 2016 CU16?
    Does the same happen regardless of whether the message is sent to internal or external users?
    For the messages that trigger the NDR, have you noticed if they have anything in common, such as if they are all sent with attachments or if a particular recipient is in the To/CC list?

    Please run the cmdlet below for one of the problematic messages and get back to us with the output after removing any personal information involved:

    Get-MessageTrackingLog -MessageSubject <subject> -Sender <mailbox address> -Recipients <mailbox address> |select timestamp,EventID, Source,ConnectorID |sort-object Timestamp 

    Besides, if you have any antivirus software configured in the environment, it’s suggested to try temporarily disabling them to eliminate the issue. 

    Any update, please feel free to post back.

    Regards,

    Yuki Sun


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Wednesday, May 27, 2020 3:14 AM
  • Yeap.
    Internal.
    Nothing unusual.

    I'll try to disable the antivirus.

    Timestamp           EventId     Source      ConnectorId
    ---------           -------     ------      -----------
    29.04.2020 21:29:57 RECEIVE     STOREDRIVER
    29.04.2020 21:29:59 RECEIVE     SMTP        Server1\Default Server1
    29.04.2020 21:30:00 SUBMIT      STOREDRIVER
    29.04.2020 21:30:00 REDIRECT    ROUTING
    29.04.2020 21:30:00 REDIRECT    ROUTING
    29.04.2020 21:30:00 EXPAND      ROUTING
    29.04.2020 21:30:00 REDIRECT    ROUTING
    29.04.2020 21:30:00 REDIRECT    ROUTING
    29.04.2020 21:30:00 EXPAND      ROUTING
    29.04.2020 21:30:03 TRANSFER    AGENT
    29.04.2020 21:30:07 AGENTINFO   AGENT
    29.04.2020 21:30:09 TRANSFER    ROUTING
    29.04.2020 21:30:09 TRANSFER    ROUTING
    29.04.2020 21:30:11 SEND        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:30:16 AGENTINFO   AGENT
    29.04.2020 21:30:16 TRANSFER    ROUTING
    29.04.2020 21:30:16 TRANSFER    ROUTING
    29.04.2020 21:30:16 TRANSFER    ROUTING
    29.04.2020 21:30:18 DELIVER     STOREDRIVER
    29.04.2020 21:30:18 SEND        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:30:19 DELIVER     STOREDRIVER
    29.04.2020 21:30:19 SEND        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:30:39 RECEIVE     SMTP        Server2\Default Server2
    29.04.2020 21:30:39 SEND        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:30:42 DELIVER     STOREDRIVER
    29.04.2020 21:30:42 SEND        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:30:58 RECEIVE     SMTP        Server2\Default Server2
    29.04.2020 21:30:58 REDIRECT    ROUTING
    29.04.2020 21:30:58 REDIRECT    ROUTING
    29.04.2020 21:30:58 SEND        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:30:58 EXPAND      ROUTING
    29.04.2020 21:31:00 AGENTINFO   AGENT
    29.04.2020 21:31:00 TRANSFER    ROUTING
    29.04.2020 21:31:00 TRANSFER    ROUTING
    29.04.2020 21:31:00 DROP        ROUTING
    29.04.2020 21:31:00 DELIVERFAIL STOREDRIVER
    29.04.2020 21:31:01 FAIL        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:31:10 RECEIVE     SMTP        Server3\Default Server3
    29.04.2020 21:31:10 SEND        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:31:14 AGENTINFO   AGENT
    29.04.2020 21:31:15 RECEIVE     SMTP        Server2\Default Server2
    29.04.2020 21:31:15 REDIRECT    ROUTING
    29.04.2020 21:31:15 REDIRECT    ROUTING
    29.04.2020 21:31:15 SEND        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:31:15 EXPAND      ROUTING
    29.04.2020 21:31:16 DELIVERFAIL STOREDRIVER
    29.04.2020 21:31:16 DELIVERFAIL STOREDRIVER
    29.04.2020 21:31:16 TRANSFER    ROUTING
    29.04.2020 21:31:16 TRANSFER    ROUTING
    29.04.2020 21:31:16 DROP        ROUTING
    29.04.2020 21:31:17 DELIVERFAIL STOREDRIVER
    29.04.2020 21:31:17 FAIL        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:31:19 SEND        SMTP        Intra-Organization SMTP Send Connector
    29.04.2020 21:31:21 FAIL        SMTP        Intra-Organization SMTP Send Connector


    Wednesday, May 27, 2020 4:03 AM
  • Hi,

    I noticed that there are several “Expand” events in the message tracking log, which indicated that a distribution group was included in the To/Cc filed. To help narrow down the issue, could you please check some more problematic messages and see whether they all have distribution groups in the recipients list? 

    What’s more, regarding the antivirus software, please have a test at your convenience and feel free to post back with any findings.

    Regards,

    Yuki Sun


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Monday, June 1, 2020 5:22 AM
  • Thank you, you're right.
    I disabled the option 'Write scan results to message headers' in Eset antivirus and now there are no errors.
    Friday, June 5, 2020 8:01 AM