Looking at the message headers? You can track a message based on sent to, but to really see where it came from, you may want to start with the message headers themselves. Al -----Original Message----- From: Simon Bound [mailto:simon.bound@xxxxxxxxxxxxxxxxxxxx] Sent: Monday, April 19, 2004 5:18 AM To: [ExchangeList] Subject: [exchangelist] Message trace http://www.MSExchange.org/ I have a client e-mail account who receives copies of messages that are NDR'd. However they appear to come "from" the Administrator and the user wants to be able to trace who they actually came from. I'm sure there is a simple answer to this so any help would be appreciated. thanks Simon ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------