Exchange 2003 NDR 'Your message did not reach some or all of the intended recipients' and mail permi

[QH]

One of my users sent an email to one of her distribution lists, and
received this NDR:

From: System Administrator
Sent: 06 June 2007 16:11
To: /o=ourdomain/ou=First Administrative Group/cn=Recipients/
cn=Bill Riley; Christine Kochanski
Subject: Undeliverable: HR Listin May 2007
Your message did not reach some or all of the intended recipients.
Subject: HR Listin May 2007
Sent: 06/06/2007 16:11
The following recipient(s) could not be reached:
/o=ourdomain.com/ou=First Administrative Group/cn=Recipients/
cn=Bill Riley on 06/06/2007 16:11
The e-mail account does not exist at the organization this
message was sent to. Check the e-mail address, or contact the
recipient directly to find out the correct address.
<EMAIL SERVER.ourdomain.com #5.1.1>
Christine Blease on 06/06/2007 16:11
The e-mail account does not exist at the organization this
message was sent to. Check the e-mail address, or contact the
recipient directly to find out the correct address.
<EMAIL SERVER.ourdomain.com #5.1.1>



Now "Bill Riley" is an ex user who has not worked for us for some
time, and he does not appear on my user's distribution list. What I
believe is happening is either someone in the distribution list has a
rule to forward emails to him, or has given him permissions for their
mailbox, or has a forward instruction to him configured on their AD
user account. Now there are loads of users on this DR list, and I do
not want to look up rules/ AD objects / and mailbox permissions for
all these people as it will take forever. Is there any way to do this
centrally?

Many thanks,

QH

 

[Alexander Zammit [MVP]]

You can get a dump of all forwarders using ldifde.exe or csvde.exe. Probably
CSVDE will give you the most clear output report here.

The forwarder is stored in AD as a property:
altRecipient

The CSVDE command would look like (inserted extra spaces for clarity):
csvde.exe
-d <domain dn>
-f <path to output text file>
-l "altRecipient"
-r "(& (objectClass=user) (altrecipient=*))

The domain DN would look something like this:
dc=domain,dc=com

For more information on these tools check these:
http://www.exchangeinbox.com/articles/037/part1_ldifde_csvde.htm
http://www.exchangeinbox.com/articles/038/part2_ldifde_csvde2.htm