We implemented a transport rule to keep certain areas of the company from 
auto-forwarding emails outside of the company.  Spot checking the results I 
find in the Sent Items emails going to what appears to be a mobile phone at 
"odd hours", indicating to me that someone has found a way to bypass this.  Has 
anyone seen this type of icon in Outlook and can give me an idea how they're 
getting around it?  I ran a Powershell script to find forwarding rules and it 
came up with 2, but those are not showing up in ECP.  The emails in the Sent 
Items appear to contain XML code.  The email contains:
<?xml version="1.0"?>
<CalendarNotificationContent 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; 
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; Version="1.0">
  <CalNotifType>Reminder</CalNotifType>
  <CalNotifTypeDesc>Appointment Reminder</CalNotifTypeDesc>
  <CalEvent>
    <DayOfWeekOfStartTime>Wednesday</DayOfWeekOfStartTime>
    <DateOfStartTime>11/16/2016</DateOfStartTime>
    <TimeOfStartTime>1:00 AM</TimeOfStartTime>
    <DayOfWeekOfEndTime>Thursday</DayOfWeekOfEndTime>
    <DateOfEndTime>11/17/2016</DateOfEndTime>
    <TimeOfEndTime>1:00 AM</TimeOfEndTime>
    <Subject>P41/8: Men's Converse End Panel</Subject>
    <Location />
  </CalEvent>
</CalendarNotificationContent>

A screen shot of the icon is attached.

Paul

Reply via email to