So, I need some help in finding who in our organization has been gotten emails from a Specific domain. Our exchange server version is 2016 and we are in a hybrid configuration.
Thanks,
So, I need some help in finding who in our organization has been gotten emails from a Specific domain. Our exchange server version is 2016 and we are in a hybrid configuration.
Thanks,
Hi @Safs-3080,
Have you got your issue fixed?
I'm writing to see if my reply is helpful to you.
If you have any update about this issue, please feel free to post back.
Hi @Safs-3080,
Are those users' mailboxes located in on-premises servers or servers in the cloud?
For users whose mailboxes located in on-premises servers, you could try the command below:
Get-messagetrackinglog -eventid "RECEIVE" |? {$_.sender -like "*<domain name>*"}
For example, here is my test results in my Exchange 2016:
For users whose mailboxes located in servers in the cloud, you could try the command below:
Get-MessageTrace | where{$_.SenderAddress -like "*<domain name>*" -and $_.Status -eq "Delivered"}

Hope these could help.
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
10 people are following this question.