User is sending an email but it's from a username@domain.tld donotreply

alexgrutza
Contributor III

First I've seen something like this.

A user is sending an email to someone, and the person receiving it cannot reply because the email address it's coming from appears to be a donotreply address. I've looked at their Google account where I can (update user, user information, etc.) but cannot find where this donotreply is coming from, nor why a recipient cannot reply. My next step is having them send me an email and then seeing if I can/cannot reply. Perhaps it's just a visual thing (strange and need to resolve it) and I can still reply, or perhaps it truly cannot be replied to.. 

Thought I'd check here to at a minimum clear up the donotreply portion.

Vault:

Untitled2.png

 

Screenshot from user's phone it appears.

Untitled.png

 

--
CISSP | LinkedIn | @Phyxiis
1 ACCEPTED SOLUTION

bethhughes
Contributor

There are two places that this can be changed. The first one is in the GAC and you've already verified that the name is correct. The other is on the users Gmail account. (see steps below) Is it possible the enduser changed it there? 

  1. Log in to your Gmail account.
  2. Click the Settings button in the upper right corner.
  3. Click on See all settings.
  4. Select the Accounts.
  5. Look for Send Mail As and click edit info next to your email address.
  6. In the pop-up window, update the name to your business name instead.
  7. Click on Save changes.

View solution in original post

12 REPLIES 12

bethhughes
Contributor

Is the user sending this directly from the Gmail app or website or are they using a third-party app such as their SIS or LMS? Out SIS, for example, can send email from a donotreply@ as a default if the teacher does not use their account linked to the SIS to send the batch email.

It would appear from the gmail app on their android based on their screenshot. I delegated access to myself and sent an email and it came in with the following. I do not see anything out of the ordinary in the Directory either.

I delegated access and sent an email and received the following.

I have yet to respond because I only got authorization from my manager to delegate access to myself, not the user, so I don't want to freak them out by responding to an email they didn't send lol. I will wait for them to send me an email as themselves and then I will reply.

Untitled3.png

--
CISSP | LinkedIn | @Phyxiis

bethhughes
Contributor

Is donotreply@ listed as a user in your Google Admin Console? If you search by donotreply does it list an account?

Nope already had checked that.  No users/groups.

Our email address for catch all is not donotreply@ either.

I've opened a case with Google in the meantime.

--
CISSP | LinkedIn | @Phyxiis

I've also asked them to go to their Name setting in myaccount (https://myaccount.google.com/profile/name) to see if it shows the donotreply. 

--
CISSP | LinkedIn | @Phyxiis

Using "gam info user username" it returns their normal name. No references of "donotreply"

--
CISSP | LinkedIn | @Phyxiis

Using "gam user username print sendas todrive" it shows "displayname" as "donotreply"

I'm not sure what that means, nor how they would change that? I'm assuming it's in their Myaccount page?

Untitled4.png

--
CISSP | LinkedIn | @Phyxiis

bethhughes
Contributor

There are two places that this can be changed. The first one is in the GAC and you've already verified that the name is correct. The other is on the users Gmail account. (see steps below) Is it possible the enduser changed it there? 

  1. Log in to your Gmail account.
  2. Click the Settings button in the upper right corner.
  3. Click on See all settings.
  4. Select the Accounts.
  5. Look for Send Mail As and click edit info next to your email address.
  6. In the pop-up window, update the name to your business name instead.
  7. Click on Save changes.

I'll pass that along to the user, thanks!

--
CISSP | LinkedIn | @Phyxiis

Yeah, remove all SendAs. Rarely a need for such.

--
https://wheretofind.me/@NoSubstitute

npl
New Contributor III

From the image the email address appears to start with 'g', so it is not a do not reply email address. It suggests that it is just the name of the account is "do not reply". Your email logs can verify this assumption by looking at the logs for the email above with subject 'testing 3'. 
Are they using a mail client - if so check the name of the account settings.  If this also happens in the gmail client check the account tab in the gmail settings to see if there ianying set there especially in the "Send mail as" section. 

alexgrutza
Contributor III

I believe it's the name in their Send As setting. Gam shows "displayname" as "donotreply" when running "gam user username print sendas"

So I'm thinking the user has to go into their settings as mentioned and change their Send As. The user stated they went through the steps to get their and confirmed that the name shows properly (their name, not the donotreply) so I'm going to have to either meet with them/Zoom, or change their password and login as them

--
CISSP | LinkedIn | @Phyxiis