Undeliverable reports email address

mara2021 1,181 Reputation points
2025-10-20T18:37:47.3933333+00:00

I am in the process of decommissioning our on-premises GFI Archiver. We are hybrid. I have a GFI Journal rule for our third-party external mailbox. I will disable this rule. I cannot find the setting for the undeliverable reports. When I set this up 2 years ago, there was a setting for undeliverable reports to add the email address to receive the reports. I have gone into Purview, compliance manager, data lifecycle management, exchange legacy and the journal rule itself. Cannot find the setting for this. I don't want any errors thrown when I disable the rule. Thank you for your help.

Exchange Online
Exchange Online
A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Hani-Ng 4,160 Reputation points Microsoft External Staff Moderator
    2025-10-21T00:41:58.8833333+00:00

    Hi mara2021

    Thank you for posting to Microsoft Q&A regarding the undeliverable journal reports address in Exchange Online.

    Based on your description, I understand you are in the process of decommissioning your on-premises GFI Archiver and want to ensure this transition does not result in delivery errors when disabling the existing journaling rule.

    Please note that the configuration for the Undeliverable Journal Reports address (previously available in the Exchange Admin Center) is now managed through Exchange Online PowerShell. This address, defined by the JournalingReportNdrTo parameter, determines where Exchange sends notifications if a journal report cannot be delivered. For detailed information, please refer to this document: Configure Journaling in Exchange Online

    Here are the steps to help you verify and update this setting:

    # Connect to Exchange Online PowerShell  
    Install-Module ExchangeOnlineManagement -Scope CurrentUser
    Import-Module ExchangeOnlineManagement
    Connect-ExchangeOnline -UserPrincipalName <******@yourdomain.com>   
    
    # Check the current journaling rules 
    Get-JournalRule | Format-Table Name,JournalEmailAddress,Enabled
     
    # View the current undeliverable report address 
    Get-TransportConfig | Select JournalingReportNdrTo   
    
    # If the value is blank, configure a monitored mailbox or distribution list 
    Set-TransportConfig -JournalingReportNdrTo "******@yourdomain.com"   
    
    # Disable the existing journaling rule (do not delete immediately) 
    Disable-JournalRule -Identity "GFI Journal Rule Name"
    
    # Remove the Journaling Rule After Verification
    Remove-JournalRule -Identity "GFI Journal Rule Name"
    

    Once you have confirmed that journaling is no longer required and no undeliverable reports have been received (after monitoring the environment for several days), you may safely remove the journaling rule permanently.

    Additionally, if the JournalingReportNdrTo value is not configured, undeliverable journal reports may not be delivered correctly: Transport and mailbox rules in Exchange Online or on-premises Exchange Server don't work as expected - Microsoft Support

    For more detailed information, please refer to the following resources:

    Set-TransportConfig (ExchangePowerShell) | Microsoft Learn

    Get-JournalRule (ExchangePowerShell) | Microsoft Learn

    Manage journaling in Exchange Online | Microsoft Learn

    I hope this information proves helpful. If you encounter issues, share error details for further help. 


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.