We have a policy where certain administrative staff need to be blind copied on all emails sent to certain distribution groups. Since this could be either a traditional or dynamic distribution group, and because the people copied could change at any given time, we decided that achieving this functionality via Transport Rules seemed to make the most sense. The rule (in Exchange 2010, by the way) was:

"When any of the recipients in the To or Cc fields is 'group1@domain.com,group2@domain.com,group3@domain.com' Blind Carbon Copy 'manager@domain.com'"

This worked fine for the most part, until we discovered that if someone BCCs one of those groups, then of course the rule doesn't capture that. There are also no conditions specific to people who were BCC'ed. I thought I could tweak the rule to use the condition "If recipient's address contains specific words" and plug the addresses of the groups there. This of course works awesome if the recipient specified in the rule is a person, but if the address is that of a group, it doesn't work (this doesn't entirely make much sense to me as the rule should be pretty generic, but anyway...).

Does anyone have any insight into this or able to offer any suggestions for workarounds?

• Edited by Derek Lofstrom Thursday, February 26, 2015 8:22 PM

That seems like a pretty huge concern, doesn't it? That anyone can circumvent email policies akin to this just by putting the address in the BCC field rather than the To or CC?

Does anyone know if this functionality exists in Exchange 2013?

• Edited by Derek Lofstrom 21 hours 8 minutes ago