Exchange 2010: Can you see who is forwarding?

[robjduk]

Hello all,

I wonder if anyone knows of a way to check and see if a user has an automated forwarder set on their mailbox which points to an external address without signing into their account? Its come to our attention that some staff may have this setup as practice and need to sort it out asap.

 

Thanks all

[Iain]

You should be able to list mailboxes with rules to forward or redirect, using the following:

 

$mailboxlist=get-mailbox; $mailboxlist | foreach {Get-InboxRule -Mailbox $_} | where {$_.RedirectTo -or $_.ForwardTo} | fl MailboxOwnerId, Name, ForwardTo, RedirectTo

 

Iain

[robjduk]

thank you for that. It is doing the trick but wonder if you can point it at users in a certain OU or exchange database?

 

Thanks again

Edited May 19, 2014 by robjduk
added database option

[RobD]

Which version of Exchange are you running? In Exchange 2010 you can disable this at the route level: Organization Config - Hub Transport - Remote Domains - Default - Message Format - untick "Allow automatic forwards"

[robjduk]

I have 2010 and will give that a go thanks but would be nice to see who is doing it at the moment.

 

Also nice to meet another Rob D on the internet

[Iain]

You can limit the lookup to an OU, by using the -OrganizationalUnit switch on the Get-Mailbox command e.g.

 

$mailboxlist=get-mailbox -organizationalunit ""; $mailboxlist | foreach {Get-InboxRule -Mailbox $_} | where {$_.RedirectTo -or $_.ForwardTo} | fl MailboxOwnerId, Name, ForwardTo, RedirectTo

[robjduk]

worked perfectly. Thanks all

[Oaktech]

Thanks for that guys... I've added that to our internal net-wiki! Really useful.