Exchange 2016 TransportAgent; message deleted by transport agent

Pero 71 Reputation points
2021-05-10T09:40:56.803+00:00

Hello,

We have exchange 2016 CU20.

There are some mails with:

Source : AGENT
EventId : DROP
RecipientStatus : {[{LED=550 4.3.2 QUEUE.TransportAgent; message deleted by transport agent};{MSG=};{FQDN=};{IP=};{LRT=}]}

How do I trace, what agent and what is the reason of eventid DROP. (Exch 2016 doesn't have message trace in EOP)

Thank you in advance

Exchange | Exchange Server | Management
{count} votes

Accepted answer
  1. Anonymous
    2021-05-11T05:32:55.557+00:00

    Hi @Pero

    Drop:
    95474-image.png
    In your case, I think it's the second reason.
    It could be deleted by the transport rules or some anti spam agents.

    You could use the following command to check the details about the Drop Event:

    Get-MessageTrackingLog -EventID Drop -MessageSubject "Subject" -Sender ******@domain.com -recipients ******@domain.com | FL  
    

    If you have some transport rules or enabled the anti spam protection( like third-party security software), you may check them first.
    Also you can provide the result of the above cmdlet with your information covered.

    Best regards,
    Lou


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


1 additional answer

Sort by: Most helpful
  1. Pero 71 Reputation points
    2021-05-12T07:10:15.467+00:00

    Get-MessageTrackingLog -EventID Drop -MessageSubject "Subject" -Sender sender@keyman .com -recipients Recipient@keyman .com | FL

    SourceContext : ScanMail Routing Agent <----- I really don't know how I missed it. It is antivirus software.
    ConnectorId :
    Source : AGENT
    EventId : DROP

    Thank you for response.

    1 person found this answer helpful.
    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.