365 email issue/question

Forums › IT Pro and developers › 365 email issue/question

1101

3122 posts

Uber Geek

#233363 13-Apr-2018 10:38

Hi .
Just wondering if anyone has come across this issue before. Its got me stumped

365 business a/c . 365 domain email . Outlook 2016
On one persons 365 based domain email , something is sending blank emails . One of the same blank emails
has been sent on 10+ separate days, other blank emails sent maybee 1x to 3x
Its an email(s) that wasnt created by the user, so not related to the bug where Outlook2016 stripped email txt

Making it hard to track down, is that this email a/c is setup on 2x PC's & 2x Android ph's
I can see these emails in the "sent items" , so was sent through this users a/c somehow . No malware found on the main PC & Outlook
updated with all current patches etc on that PC

365 admin gives me little to track down whats causing these random blank emails, or exactly what device or software sent them
Anyone seen this before or have any ideas how to resolve it ?
It doesnt happen on any other of that companies email a/c's .

Dynamic

3867 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#1995306 13-Apr-2018 11:00

Have a careful look through the email headers of one of the blank messages that have been received. Open a received blank message up in its own Outlook window, click File, then look for a Properties button in Outlook 2016. Copy these and paste into Notepad or https://mxtoolbox.com/emailheaders.aspx. You should see the path the message went through (including source IP address) and hopefully the name of the software that sent the email.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

nzkc

1572 posts

Uber Geek

#1995346 13-Apr-2018 11:16

Couple of things I would check:

Check if out of office is turned on
Has the user configured email rules to respond to emails...and maybe hasn't done a bang up job of that rule ;-)
Has/is something using the O365 API to send emails?
Maybe recreate the Outlook profile (even with a new name) in case another application is using the current one

Digging deeper I'd look at times of those emails and see if its related to that PC being on/active. Or if it could be coming from something else - that'd start to give you more clues where to look.

1101

3122 posts

Uber Geek

#1995497 13-Apr-2018 13:54

The plot thickens , making things even more strange .

The user in question ~user A~ also has ~user B~'s email a/c added as a 2nd a/c in Outlook.

Ive traced the original emails : they are user B's emails , emails sent to/by user B many months ago .
Something has stripped all the message txt , on those OLD emails, and re-sent those emails via 'user A's email

Mail headers didnt really help. I may need to get MS involved to sort this mess out.
I did try creating a new profile in Outlook & resetup the email : didnt help. The next step is to wipe Outlook/Office & reload .

It could even be Android weirdness , doing this via the ph's. Android apps allways taking permissions for everything incl email.