{"id":1191,"date":"2018-02-06T15:03:40","date_gmt":"2018-02-06T13:03:40","guid":{"rendered":"https:\/\/msb365.abstergo.ch\/?p=1191"},"modified":"2019-01-31T19:49:58","modified_gmt":"2019-01-31T17:49:58","slug":"not-able-send-message-user-not-found","status":"publish","type":"post","link":"https:\/\/www.msb365.blog\/?p=1191","title":{"rendered":"Not able to send Message &#8211; User not found"},"content":{"rendered":"<p>One of my customers is running an exchange environment with multiple Accepted Domains.<br \/>\nThe reason for that is that this company is a Holding and it has a bulk of sub companies.<br \/>\nNormally the sub companies are using the Mail service from the Holding environment.<br \/>\nNow one of the sub companies wants to use an autonomy mail environment, which is not attached to the Holdings infrastructure.<\/p>\n<p>&nbsp;<\/p>\n<p>After they have configured their own Mail system, everything works fine \u2013 except mail flow from the Holding.<br \/>\nAs an example:<br \/>\nThe Holding is called Contoso Ltd. (contoso.com) and the sub company sub.contoso.com.<br \/>\nNew Mail infrastructure can receive mails from around the world: @outlook.com -&gt; @sub.contoso.com works without any problems.<br \/>\nBut if users from Contoso Ltd. trie to send Mails to the sub company (@contoso.com -&gt; @sub.contoso.com), it fails with the following NDR:<\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-full wp-image-1192\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1.png\" alt=\"\" width=\"718\" height=\"1033\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1.png 718w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-209x300.png 209w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-712x1024.png 712w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-600x863.png 600w\" sizes=\"(max-width: 718px) 100vw, 718px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>As we can see in this NDR, the exchange was not able to find the recipient. The reason for that is clear; there is no mail address or Mailbox of this user in the organization of Contoso. However, why exchange tries to send\/deliver the message internal and not external?<\/p>\n<p>&nbsp;<\/p>\n<p>To figure this out we have to check for some different things in our environment.<br \/>\nLet us start with internal DNS zone:<br \/>\nWe need to open a command prompt on one of the Exchange servers in the Contoso environment and run the following command:<\/p>\n<pre class=\"\">nslookup \u2013q=mx sub.contoso.com<\/pre>\n<p>With this command, we try to figure out if the MX Record is visible for our Exchange server.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-1193\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-1.png\" alt=\"\" width=\"519\" height=\"118\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-1.png 519w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-1-300x68.png 300w\" sizes=\"(max-width: 519px) 100vw, 519px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>As we can see in the print screen, for our Exchange server the domain sub.contoso.com do not exists. I figured out, that there is no internal DNS zone created for the sub Domain.<br \/>\nAfter we have created this internal DNS zone with the right settings, I had run again the command:<\/p>\n<pre class=\"\">nslookup \u2013q=mx sub.contoso.com<\/pre>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1194\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-2.png\" alt=\"\" width=\"522\" height=\"154\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-2.png 522w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-2-300x89.png 300w\" sizes=\"(max-width: 522px) 100vw, 522px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Now it looks much better for our Exchange.<\/p>\n<p>So let us try to send a test mail to a recipient in the target domain (@sub.contoso.com).<br \/>\nTo track our Mail we can simply use the Exchange management shell and run the following command:<\/p>\n<pre class=\"\">Get-MessageTrackingLog -Start \"02\/02\/2018 13:15:00\" -End \"02\/02\/2018 17:00:00\" -Sender \"drago.petrovic@contoso.com\" -server EXC01<\/pre>\n<p>As we can see on the print screen, our message fails to be delivered.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1195\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2.png\" alt=\"\" width=\"1475\" height=\"289\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2.png 1475w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2-300x59.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2-768x150.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2-1024x201.png 1024w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2-600x118.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2-780x153.png 780w\" sizes=\"(max-width: 1475px) 100vw, 1475px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Even the NDR shows us again that the recipient user is still unknown.<\/p>\n<p>&nbsp;<\/p>\n<p>So what to do next?<\/p>\n<p>We going to login to our Exchange ECP and navigate to \u201c<strong>mail flow<\/strong>\u201d \/ \u201c<strong>accepted domains<\/strong>\u201d.<br \/>\nHere we can see that our Domain contoso.com is registries as an Authoritative Domain. That means all subdomains will be listening to the main domain, like a wildcard.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1196\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3.png\" alt=\"\" width=\"1212\" height=\"376\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3.png 1212w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-300x93.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-768x238.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-1024x318.png 1024w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-600x186.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-780x242.png 780w\" sizes=\"(max-width: 1212px) 100vw, 1212px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>So let us register here a new accepted domain for our sub company.<br \/>\nFor that we will register it as internal relay:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1197\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/4.png\" alt=\"\" width=\"669\" height=\"578\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/4.png 669w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/4-300x259.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/4-600x518.png 600w\" sizes=\"(max-width: 669px) 100vw, 669px\" \/><\/p>\n<p>After we have done this, we need to go to our send connectors, if the company is using a smart host for sending mails, we will come back later to it:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1198\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5.png\" alt=\"\" width=\"1070\" height=\"835\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5.png 1070w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-300x234.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-768x599.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-1024x799.png 1024w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-600x468.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-780x609.png 780w\" sizes=\"(max-width: 1070px) 100vw, 1070px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>We have to check if the scoping is set right. In my case all looks good because it is set as Wildcard with the (*) entry.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1199\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6.png\" alt=\"\" width=\"788\" height=\"653\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6.png 788w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6-300x249.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6-768x636.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6-600x497.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6-780x646.png 780w\" sizes=\"(max-width: 788px) 100vw, 788px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>If your connectors are configured differently, you will have to add the sub domain (sub.contoso.com) as an address space.<\/p>\n<p>&nbsp;<\/p>\n<p>From now, the mail flow is working as expected and we have fixed the issue.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong><span style=\"color: #ff0000;\">IMPORTANT:<\/span><\/strong><br \/>\nIf you are using a smart host for sending mails, you need to check the configuration there as well. Some of the smart hosts can be configured that all messages from a domain (@contoso.com) included all sub domains has to be delivered to the Exchange organization. In this case the sender mail will again be returned to the Contoso Exchange and not to the sub.contoso.com Mail server and we have again the same NDR.<\/p>\n<p>&nbsp;<\/p>\n<p>So if you still have the problem after following this article, check your smart host setting!<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>Photo by&nbsp;<a href=\"https:\/\/unsplash.com\/photos\/UDleHDOhBZ8?utm_source=unsplash&amp;utm_medium=referral&amp;utm_content=creditCopyText\">Daniel Jensen<\/a>&nbsp;on&nbsp;<a href=\"https:\/\/unsplash.com\/search\/photos\/lost?utm_source=unsplash&amp;utm_medium=referral&amp;utm_content=creditCopyText\">Unsplash<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>One of my customers is running an exchange environment with multiple Accepted Domains. The reason for that is that this company is a Holding and it has a bulk of sub companies. Normally the sub companies are using the Mail service from the Holding environment. Now one of the sub companies wants to use an [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3115,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[2],"tags":[],"class_list":["post-1191","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-exchange"],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/1191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1191"}],"version-history":[{"count":3,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/1191\/revisions"}],"predecessor-version":[{"id":3116,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/1191\/revisions\/3116"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/media\/3115"}],"wp:attachment":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}