Overview

Spam is being flagged but it is not moved to the configured Exchange subfolder.

The QAS.MTEF.log file reports:

ERROR: The remote server returned an error: (403) Forbidden

Solution

The issue is caused by an error with the credentials of the Exchange Impersonation User used to move spam to subfolders.

Running the following command on the Exchange Management Console results in a failure:

Test-OutlookWebServices -identity:<impersonation user's email> -MailboxCredential (get-credential <impersonation user's login name>) | ft -AutoSize -Wrap MonitoringEventId,Scenario,Result,Error

In the above command:

• <impersonation user's email> is the email address of the user (e.g. GFIME_MOVEEXCH_USER@domain.com)
• <impersonation user's login name> is the domain login of the user (e.g. domain\GFIME_MOVEEXCH_USER)

In this situation, the solution is to recreate the user, by following the steps in the How to move spam to Exchange sub-folders (Impersonation Credentials) article.