Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


Auditing a User

Posted on 1999-06-30
Medium Priority
Last Modified: 2012-05-04
I need to monitor a user at my company to make sure they are not sending the wrong thing to the wrong persons.
Currently we use Outlook Express with an isp for email, but are migrating to Exchange and Outlook98.
What I need is her outgoing email, for instance bcc-ing her supervisor when she sends mail without her knowing. Awful thing to resort to I know. But can it be done somehow?
Thanks for the help.
Question by:jagoodie
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 38

Expert Comment

by:Gerwin Jansen, EE MVE
ID: 1625225
Using the Exchange administrator, you can look into the users' mailbox, just add an admin to the users who have access to the mailbox. Start a client as admin and create a profile for the user in question. You'd have to check the 'sent items' folder to view sent mail. If the user keeps copies, you could see them but if the user is suspicous, he or she might be smart. What you also could do is check any personal folder files the user created, on homedrive or workstation.

You option about BBC-ing would not work because the user can enable the BCC field and see what's happening.

The best solution would be to capture all mail at the Exchange server somehow. What you could do there is add an alternate recipient (admin) to which incoming mail for that user is sent as well (delivery options, user properties screen).

Author Comment

ID: 1625226
Yes, incoming mail is not a problem, but getting outgoing mail before it is deleted is my issue.
i hate dealing with stuff like this.

Expert Comment

ID: 1625227
Exchange Server can control recovery of deleted items. I think the default is 1 day but you can set if whatever you want. Then use the information others above have given you to look into the users mailbox and recover deleted items.
Select the private information store properties and under the General tab you can set this.
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.


Expert Comment

ID: 1625228
If she is conscientious, recovering the deleted items will fail since the user can purge the items from the dumpster on the Exchange server with no problem.

Are you going to Exchange 5.5? If so, you may be able to do something with server scripts to catch outbound messages and make copies of them to your bosses mailbox. I don’t think you will be able to do anything if she is still on OE.

If you set up a rule, then the BCC will probably be visible to her if she looks at the message in her sent items folder. And, of course, the rule itself would be visible if she views her set of rules.


Accepted Solution

brondi earned 300 total points
ID: 1625229
MS Exchange 5.5 SP1 and above has the ability to achive messages sent / received for investigation at a later time.

(I believe there are legal issues behind this procedure though that require certain policies to be made public before hand.)


Author Comment

ID: 1625230
not exactly the answer i was hoping for, but good enough.

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this step by step procedure, you will come to know the details of creating an Outlook meeting in 2007, 2010, 2013 & 2016.
In this article I discuss my selections of the Top Four free Outlook OST File Viewers available. Open, view and read even damaged OST files by using these tools. They all provide a clear preview of all data such as emails, notes, tasks, calendars, e…
Get people started with the process of using Access VBA to control Outlook using automation, Microsoft Access can control other applications. An example is the ability to programmatically talk to Microsoft Outlook. Using automation, an Access applic…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question