{"id":579,"date":"2009-12-15T12:43:56","date_gmt":"2009-12-15T12:43:56","guid":{"rendered":"http:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/"},"modified":"2009-12-15T12:43:56","modified_gmt":"2009-12-15T12:43:56","slug":"the-case-of-the-vanishing-e-mails","status":"publish","type":"post","link":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/","title":{"rendered":"The Case of the Vanishing E-mails"},"content":{"rendered":"

I just wanted to relay a support call I\u2019ve just dealt with as it really had me stumped. For a while I was concerned there was something really bad happening but now that I\u2019ve gotten to the bottom of it I can breathe easy as it wasn\u2019t actually all that serious<\/p>\n

Our client called to say that she was expecting an e-mail from their German contractor and it hadn\u2019t arrived. He\u2019d resent it a couple of times to confirm he\u2019d got the email address, etc correct<\/p>\n

I logged onto the server and used Exchange message tracking to see if the e-mail had arrived<\/p>\n

The message did arrive at the server as expected <\/p>\n

\"image\"<\/a> <\/p>\n

My next port of call was to logon to the PC and check Outlook, sometimes I\u2019ve seen similar cases where a filter has been applied by mistake that means the user has \u201clost\u201d the message. Unfortunately this drew a blank as well<\/p>\n

I used the advanced find feature to display all emails that had been delivered today and I even created a search folder to do the same thing but the message was nowhere to be seen<\/p>\n

I logged in via Outlook Web Access to see if the message was visible there as I\u2019ve also seen cases where the message is corrupt and Outlook can\u2019t display the message but OWA seems to do ok with it. Again no luck here<\/p>\n

So I checked to see if she hadn\u2019t deleted the message by mistake. The message wasn\u2019t in there but when I used the \u201cRecover Deleted Items\u201d feature in Outlook there is was! I thought this would be a simple matter of clicking the message and pressing restore\u2026\u2026unfortunately not<\/p>\n

After I clicked restore I expected the message to reappear in the Inbox but after waiting a few minutes, nothing<\/p>\n

Confused I went back into the dialog in case I\u2019d selected the wrong message. The message was still available for restore so I clicked it again. Once again the message failed to reappear so I went back in again<\/p>\n

One of the columns is \u201cDeleted On\u201d, I noticed that time was only a minute ago<\/p>\n

\"image\"<\/a> <\/p>\n

I recovered the item again, noted the time, waited a minute and went back in and lo and behold the deleted on time had changed to the time just after I\u2019d recovered the item<\/p>\n

Confused I turned to the server, this particular server uses McAfee GroupShield for checking inbound messages for malware so I trawled through the logs to see if it was picking this up as a dodgy message. I wasn\u2019t holding my breath though as this isn\u2019t how GroupShield works (the message is usually quarantined or a part of it replaced and the user alerted). As expected this was a dead end<\/p>\n

I was starting to get a little paranoid now so checked the PC over for malware and my initial checks didn\u2019t turn anything up. I even used SysInternals Process Monitor to track what was going on during the recovery to see if there was an outside process doing something but again this didn\u2019t show anything of use<\/p>\n

I fired up Outlook in safe mode but didn\u2019t get very far as the recover items feature is an add-in itself!<\/p>\n

I decided to keep my attentions on Outlook and created a new profile for the user. This time I disabled Outlook cache mode and recovered the item again<\/p>\n

This time the message reappeared as expected!!<\/p>\n

As soon as this happened a huge light bulb came on somewhere in the back of my head \ud83d\ude42<\/p>\n

There is a feature in Outlook that will ONLY work when cache mode is enabled <\/p>\n

Outlook Junk Filter<\/strong><\/p>\n

I went into the options for this it hit me straight in the face!<\/p>\n

This is how the junk filter was configured on the PC<\/p>\n

\"image\"<\/a> <\/p>\n

Can you see the problem?<\/p>\n

Only allow from safe lists<\/strong> and permanently delete suspect messages<\/strong>!!!<\/p>\n

I\u2019m surprised she gets any email at all! But if she only receives messages from a group of people that she always emails then they would be on her safe list<\/p>\n

The junk filter checks for messages as soon as they arrive in the inbox, irrespective of whether that is because the message is an incoming e-mail or has just appeared there after being restored <\/p>\n

I have no idea why this has changed. It must have only have changed recently because as I said earlier the configuration would surely mean she would notice lots of emails going missing. <\/p>\n

Once I turned off the junk mail filter I was able to recover the message ok<\/p>\n

Ordinarily when a client doesn\u2019t require the Outlook junk filter because they are getting their spam filtered elsewhere I use the Office ADM files and setup group policy to explicitly disable the Outlook filter (Office 2007 version here<\/a>) so I need to go and set this up I think!<\/p>\n

Minor panic over!<\/p>\n","protected":false},"excerpt":{"rendered":"

I just wanted to relay a support call I\u2019ve just dealt with as it really had me stumped. For a while I was concerned there was something really bad happening but now that I\u2019ve gotten to the bottom of it I can breathe easy as it wasn\u2019t actually all that serious Our client called to<\/p>\n

<\/span>Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[13,25,28,30],"tags":[],"class_list":["post-579","post","type-post","status-publish","format-standard","hentry","category-exchange-2003","category-mcafee","category-office","category-outlook"],"yoast_head":"\nThe Case of the Vanishing E-mails - Andy's Techie Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Case of the Vanishing E-mails - Andy's Techie Blog\" \/>\n<meta property=\"og:description\" content=\"I just wanted to relay a support call I\u2019ve just dealt with as it really had me stumped. For a while I was concerned there was something really bad happening but now that I\u2019ve gotten to the bottom of it I can breathe easy as it wasn\u2019t actually all that serious Our client called toRead More\" \/>\n<meta property=\"og:url\" content=\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/\" \/>\n<meta property=\"og:site_name\" content=\"Andy's Techie Blog\" \/>\n<meta property=\"article:published_time\" content=\"2009-12-15T12:43:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/andyparkes.co.uk\/blog\/wp-content\/uploads\/2009\/12\/image_thumb.png\" \/>\n<meta name=\"author\" content=\"Andy Parkes\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andy Parkes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/\",\"url\":\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/\",\"name\":\"The Case of the Vanishing E-mails - Andy's Techie Blog\",\"isPartOf\":{\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/#website\"},\"datePublished\":\"2009-12-15T12:43:56+00:00\",\"dateModified\":\"2009-12-15T12:43:56+00:00\",\"author\":{\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/3534e8ac6b1bec765cd061feff56679d\"},\"breadcrumb\":{\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/andyparkes.co.uk\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Case of the Vanishing E-mails\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/#website\",\"url\":\"https:\/\/andyparkes.co.uk\/blog\/\",\"name\":\"Andy's Techie Blog\",\"description\":\"Professional Geek\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/andyparkes.co.uk\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/3534e8ac6b1bec765cd061feff56679d\",\"name\":\"Andy Parkes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/3824cbf53df51d7ca5cf809b6ad81a157fbfff2292e36ab8666f04ddad06bfcc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/3824cbf53df51d7ca5cf809b6ad81a157fbfff2292e36ab8666f04ddad06bfcc?s=96&d=mm&r=g\",\"caption\":\"Andy Parkes\"},\"description\":\"Andy Parkes is Technical Director at Coventry based IT support company IBIT Solutions. Formerly, coordinator of AMITPRO and Microsoft Partner Area Lead for 2012-2013. He also isn't a fan of describing himself in the third person.\",\"sameAs\":[\"http:\/\/www.andyparkes.co.uk\/blog\"],\"url\":\"https:\/\/andyparkes.co.uk\/blog\/index.php\/author\/andyparkes\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Case of the Vanishing E-mails - Andy's Techie Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/","og_locale":"en_US","og_type":"article","og_title":"The Case of the Vanishing E-mails - Andy's Techie Blog","og_description":"I just wanted to relay a support call I\u2019ve just dealt with as it really had me stumped. For a while I was concerned there was something really bad happening but now that I\u2019ve gotten to the bottom of it I can breathe easy as it wasn\u2019t actually all that serious Our client called toRead More","og_url":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/","og_site_name":"Andy's Techie Blog","article_published_time":"2009-12-15T12:43:56+00:00","og_image":[{"url":"https:\/\/andyparkes.co.uk\/blog\/wp-content\/uploads\/2009\/12\/image_thumb.png"}],"author":"Andy Parkes","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Andy Parkes","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/","url":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/","name":"The Case of the Vanishing E-mails - Andy's Techie Blog","isPartOf":{"@id":"https:\/\/andyparkes.co.uk\/blog\/#website"},"datePublished":"2009-12-15T12:43:56+00:00","dateModified":"2009-12-15T12:43:56+00:00","author":{"@id":"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/3534e8ac6b1bec765cd061feff56679d"},"breadcrumb":{"@id":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/andyparkes.co.uk\/blog\/index.php\/2009\/12\/15\/the-case-of-the-vanishing-e-mails\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/andyparkes.co.uk\/blog\/"},{"@type":"ListItem","position":2,"name":"The Case of the Vanishing E-mails"}]},{"@type":"WebSite","@id":"https:\/\/andyparkes.co.uk\/blog\/#website","url":"https:\/\/andyparkes.co.uk\/blog\/","name":"Andy's Techie Blog","description":"Professional Geek","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/andyparkes.co.uk\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/3534e8ac6b1bec765cd061feff56679d","name":"Andy Parkes","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/andyparkes.co.uk\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/3824cbf53df51d7ca5cf809b6ad81a157fbfff2292e36ab8666f04ddad06bfcc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3824cbf53df51d7ca5cf809b6ad81a157fbfff2292e36ab8666f04ddad06bfcc?s=96&d=mm&r=g","caption":"Andy Parkes"},"description":"Andy Parkes is Technical Director at Coventry based IT support company IBIT Solutions. Formerly, coordinator of AMITPRO and Microsoft Partner Area Lead for 2012-2013. He also isn't a fan of describing himself in the third person.","sameAs":["http:\/\/www.andyparkes.co.uk\/blog"],"url":"https:\/\/andyparkes.co.uk\/blog\/index.php\/author\/andyparkes\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pmvJ6-9l","jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/posts\/579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=579"}],"version-history":[{"count":0,"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/posts\/579\/revisions"}],"wp:attachment":[{"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/andyparkes.co.uk\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}