Microsoft Exchange, Auto Forwarded Message Report

Within the Exchange Admin Center, under Reports > Mail flow, there is a pre-built report named “Auto forwarded message report”. This provides information about automated forwarding of emails to external domains, and is a useful resource to proactively identify potential data leakage.

This report includes a table with the following properties:

• Forwarders: The local mailbox that is forwarding emails externally.
• Forwarding Type: The method used for automatically forwarding emails, including Mailbox Rule (configured by a user in the context of that mailbox), or SMTP Forwarding (configured by an administrator for that mailbox).
• Recipient Name: The mailbox friendly name or actual mailbox that is recieiving forwarded emails.
• Recipient Domain: The domain of the recipient mailbox.
• Forward Count: The number of emails forwarded between the Forwarder and Recipient in the timeframe the report is scoped to.