When sending an email to Guest Email accounts (external users from a trusted domain) selected from the first instance of the "Offline Global Address List" in the Outlook "Address Book" dropdown, the recipient email address is shown as null in incident reports, and empty in incident snapshots.
These steps to duplicate this are:
This can also be caused when updating an Outlook calendar meeting or even replying to a message with one of the offline guest contacts.
DLP Endpoint
Trusted domains
O365 - Online Exchange
Outlook client
According to Microsoft Developer Messaging analysis:
"The issue is caused by the cloud GAL classifying the users in the trusted domains as "Guest accounts" and those accounts do not have an email address associated with them. MSFT said that there is an open enhancement request to add the email address to the guest users. There is no ETA for that update, but it won't be before next year"
Microsoft Exchange team suggested that as a workaround "that we change the way we look for the email addresses as both MFCMapi and OutlookSpy shows an email in the "PR_EMS_AB_PROXY_ADDRESS" as "SMTP:<email address>"
However, PR_EMS_AB_PROXY_ADDRESS is not a property that is available within the MailItem / RecipientTable. This is only visible using MFCMapi and loading the contact from the Address Book directly.
The updated outlk64.dll that can collect the email address of the guest account is now available.
Please reach out to DLP Support to request this fix.
Provide the Support Engineer with this KB number.
The fix is also available in 16.0 RU1.