exchange online email forwarding

[E_G_R2]

Historically part time tutors when they had school email accounts setup had them forwarded to personal accounts.

 

In the light of safeguarding and GDPR we want to change this.

 

In exchange online when I use either of these commands I don't see any forwarded email address's

 

Get-Mailbox | FL DeliverToMailboxAndForward,ForwardingAddress,ForwardingSmtpAddress

 

Get-Mailbox -ResultSize Unlimited | Where {($_.ForwardingAddress -ne $Null) -or ($_.ForwardingsmtpAddress -ne $Null)} | Select Name, ForwardingAddress, ForwardingsmtpAddress, DeliverToMailboxAndForward

 

My problem is that I have tested a couple of address's that I know are being forwarded and the email to the school account ends up in the private account.

 

I've double checked the GUI and even had the tutor log on to webmail in front of me and there is no forwarding set up.

 

Confused

[djm968]

Try this.

 

Get-Mailbox -ResultSize unlimited | Where-Object ForwardingSmtpAddress -NE $null | select UserPrincipalName,ForwardingSmtpAddress,DeliverToMailboxAndForward | Out-GridView

[MartinT]

I have the same issue and will have to stop forwarding to Peri and Governor private e-mail addresses soon.

 

Have you definitely got no forwarding set up in the EAC, Mailbox Features, Mail Flow, Forwarding section?

[foofighterjim]

I wouldn't spend time looking into it, you can't allow it to continue so inform them and look at the following:

 

https://blogs.technet.microsoft.com/exovoice/2017/12/07/disable-automatic-forwarding-in-office-365-and-exchange-server-to-prevent-information-leakage/

[E_G_R2]

What is the users in the past setup forwarding via desktop outlook?

[synaesthesia]

Then they are personally liable, just as if they would be if they printed something out and left it lying around.

[MartinT]

No, if you are auto-forwarding, then the school is liable for any breaches.

[E_G_R2]

No nothing setup which is confusing the heck out of me. My only thought is that this has been done through desktop outlook and its not replicated up to the EAC if that's possible?

[synaesthesia]

Yes it's possible; you should be able to use message trace to verify that. But as said, if they are doing something personally to forward emails then they are the problem.

[E_G_R2]

Yes it's possible; you should be able to use message trace to verify that. But as said, if they are doing something personally to forward emails then they are the problem.

 

They are a problem full stop. Most only come in once a month or so for an few hours to give specialist tuition and they are difficult to nail down. Think I'll have to trace a few messages. To these people things like GDPR and Safeguarding have no meaning. They're at the top of their profession (music) and act accordingly. Even the management have trouble keeping them in order.