Environment: Exchange 2007 SP2, roll up 4 Question: User Alpha is continuously getting an email from an unknown source (internal), the sender beta is sending an email to a DL but the strange part is user Alpha is not a part of the DL at all, also user beta is not sending an email to any BCC group, so only "To" and that too to a DL which user Alpha doesn’t have a membership too. I have checking the membership of user Alpha, he is not a part of any DL to which that email has been sent to.. No BCC, No CC, it only happened when any sender sends an email to a particular DL in which Alpha is not listed as a member. Forwarding or redirection is not in question, as I don’t find any TAG at the top of email when Alpha received says forwarding on behalf of...or its redirection.. How can we find why user Alpha is getting that email...what is the source, which DL he is part of which is being that email sent to.. I would appreciate if you guys can guide me towards the root cause. Inderjit

hi, To get a list of the distribution groups which the user belongs to, please open Exchange Management Console (EMC) and click Recipient Configuration. Right click on the user and select Properties. On the Member Of tab, all the distribution groups this user belongs to are listed. Best regardsBest Regards Don't forget to mark it as answer if it helps

Thanks, I found the list of DL which Alpha is a part of also I have validated that none of the DL which alpha is a member of is listed under the "TO" address on the email which senders sent, my next question would be why Alpha is getting that email? Do we have any concept of hidden users under the DL? Appreciate your response. ThanksInderjit

You cannot hide group membership. If you are viewing the properties of the group in ADUC then that is the members shown. It is possible to hide the group membership from being seen, but that doesn't hide it from ADUC or the Exchange Management Console. I would suggest that you start with message tracking. See what that shows for the message being received. It may show for example that the message is being sent via another user. There is always a chance that you have an inconsistent domain and that the replication isn't occurring correctly. Has the user ever been a member of this group? I presume you have checked for nested groups? Simon.Simon Butler, Exchange MVP Blog | Exchange Resources | In the UK? Hire Me.

Hi IJSingh, 1. Did you check transport rule? I can reproduce it once I create such a transport rule: Condition: send to a member of DL Action: Copy the message to Alpha 2. Run this command to see if Alpha is member of the distribution group Get-DistributionGroupMember –Identity DL

Hi Short note to find it It apears like some forwarder outlook rule is configured on the members outlook of the DL to forward email to this alpha user. If there are only few members in the DL, check whether any forwarder rule is configured. If more number of user in the DL and you want to find the correct user, inform, i ll give a suggestion