Determine if “Delay Delivery” was used for a message sent

Scenario: You want to determine if a message that you received was sent using “Delay delivery”

Indicators: Below are some indicators to determine if the message was sent using Delay Delivery:

Message Header: (located on any message received by the sender)
Deferred-Delivery – Check for t his property in the Message Header similar to Deferred-Delivery: Mon, 4 Jan 2021 15:36:00 +0000

Email Item Properties: (located only on the sender’s email item located in the sent items)

Outlook Column View: Defer Until, Received, and Sent


MFCMAPI: PR_Message_Delivery_Time, PR_Deferred_Delievery_Time, PR_Deferred_Send_Time


Note: The properties of the test message above show that the message was created at 10:34am EST but delayed delivery until 10:36am EST.

Use MFCMapi to locate the Categories used in your mailbox

Scenario:  After mailbox categories have mysteriously disappeared, you want to verify that the categories are not hanging around in the backend of your mailbox.  The concern is that you re-add the categories and if they mysteriously show up, it would create a headache to clean it up.

Solution: The categories that is used throughout the mailbox is located in a hidden area in the calendar. Using MFCMapi, navigate to the PR_ROAMING_XMLSTREAM by following:

  1. Session –>Logon
  2. Select the mailbox profile for the user affected.
  3. Expand Top of Information Store
  4. Right click on Calendar and select ‘Open Associated Contents Table’
  5. Select the entry with Subject  “IPM.Configuration.CategoryList”
  6. Locate and open the property “PR_ROAMING_XMLSTREAM”
  7. Copy the contents of the Text value into notepad and parse everything that starts with <category name =”…”
  8. Now you can see a list of every category that is associated with the mailbox.