XFOR: Exchange IMS Can Suppress Generation of a Delivery Receipt

• Microsoft Exchange Server, version 5.5

SYMPTOMS

The Internet Mail Service will allow delivery receipts to be returned to the Internet if the originator asks for a receipt (Return-Receipt-To:). This can open up a security hole as this will show a valid recipient on a Microsoft Exchange system.

RESOLUTION

To resolve this problem, obtain the latest service pack for Exchange Server version 5.5. For additional information, please see the following article in the Microsoft Knowledge Base:

Q191014 XGEN: How to Obtain the latest Exchange Server 5.5 Service Pack

ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.5/PostSP2/imc-fix

STATUS

Microsoft has confirmed this to be a problem in Microsoft Exchange Server version 5.5. This problem was first corrected in Exchange Server 5.5 Service Pack 3.

MORE INFORMATION

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys and Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. If you are running Windows NT, you should also update your Emergency Repair Disk (ERD).

There is a new registry entry that will prevent delivery receipts from being sent to the Internet while allowing other auto-replies to be sent.
To add this new registry entry, perform the following steps:

1. Start Registry Editor (Regedt32.exe).



2. Locate the following key in the registry:




HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIMC\Parameters   

3. On the Edit menu, click Add Value, and then add the following registry value:




      Value Name: AlwaysSuppressDR
      Data Type:  REG-DWORD 1
      Value: 1 or 0
   

Note: Set the value to 1 to suppress the generation of delivery receipts. The default value of 0 allows deliver receipts to be generated.


4. Quit Registry Editor.

Additional query words:

Keywords : exc55 EXC55SP3Fix
Version : winnt:5.5
Platform : winnt
Issue type : kbbug