Journal report is not delivered to a journaling mailbox in an Exchange Server 2010 environment

Symptoms

Consider the following scenario:

• You create a journaling mailbox that is used for collecting journal reports in a Microsoft Exchange Server 2010 environment.

• You create a journal rule to enable journaling for the email messages that are sent to a user’s mailbox. The rule sends journal reports to the journaling mailbox.

• The user receives a read-only email message that is delivered by using Simple Mail Transfer Protocol (SMTP).

In this scenario, the journal report is not delivered to the journaling mailbox and remains in the Retry message queue on the Hub Transport server. Additionally, you receive the following error message in the Queue Viewer tool:

Cause

This issue occurs because the Exchange server throws an AccessDenied exception. This exception is thrown when the server tries to read an undefined property of the Transport Neutral Encapsulation Format (TNEF) attachment in the journal report. 

Note The original email message is encapsulated as a TNEF attachment in the journal report.

Resolution

To resolve this issue, install the following update rollup:

2706690 Description of Update Rollup 4 for Exchange Server 2010 Service Pack 2

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information about journaling, go to the following Microsoft website:

General information about journalingFor more information about how to create a journal rule, go to the following Microsoft website:

How to create a journal ruleFor more information about the transport journaling feature in Exchange Server 2007, go to the following Microsoft website:

White paper about Exchange 2007 transport journalingFor more information about the PR_TNEF_CORRELATION_KEY property in the TNEF attachment, go to the following Microsoft website:

General information about the PR_TNEF_CORRELATION_KEY property