Here are some updated field notes from a recent message tracking case. This post is also an update of a previous post about MessageTracking I made about a year ago.
Unfortunately the Tracking Log tool in Exchange Management Console (EMC) – does not allow the use of wildcard characters, when trying to search of all mails sent or received from a certain domain. EMC can only handle a specific user or list of users.
However using the Exchange Management Shell and the cmdlet Get-MessageTracking, you are able to use wildcards in your search.
Below I have listed two examples to search for all mails sent from the “msdigest.net” domain and received from the “msdigest.net”.