Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1027
  • Last Modified:

Snooping (reading) user email in Exchange

The boss wants to snoop on user's email. It has long been said to the employees that she reserves the right to do so... but now she actually wants to do it. How can this be setup in AD/Exchange to allow the boss to easily get into the accounts w/o the users knowing it (I'm looking for something other than forwarding all of the email to the boss... ). Let me know if you have any questions. :)
2 Solutions
You could use the delegation wizard to make the boss an exchange admin, then she could open anyone's email in HER outlook - File | Open | Other users folder.

Or you could just add her account to the mailboxes in question.

Now if you wanted to see ALL folders that have been created then you would need to add the mailbox as a secondary mailbox in the properties of Exchange on the Boss's Outlook - Exchange properties | Advanced tab | add user in here.

Hope this helps.


Go into ESM, right click/properties of the information store | Security tab | add the boss in here (depending on the size of your org you may have to wait for replication).

It would be easy enought to give the boss a copy of everything that comes IN to a users mailbox, but if you want to see what a user sends OUT is a different story. There is no inherent way to add a permanent bcc to a user.

Sure, being an exchange admin on the mailbox would allow you to look at the mailbox, but what if the user is an ardent house keeper and immediatley deletes any emails, sent items, or trash? -- i have seen this be the case on most of the offenders i have come across.

here, we use a utility called eXclaimer for exchange. it is made by softwarehself and is reasonable priced for what it does. The actual snooping functions are an added feature, not the main focus of the software but the do the job nicely.

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

mickeyknoxAuthor Commented:
Jason/Rodlab: I like the first option you listed. THe offenders seem to be bad about remembering to clean-up after their mess... deleted items are often left for days... However, when I try it... I get the message "Unable to display the folder. The Inbox folder could not be found."
...and, of course, your boss will want to notify HR and Legal.
You may have to wait for replication.....give it a little time then check back.

I wrote a vbscript to do that.  It requires OWA and your boss will need rights:

Replace "exchange" with the name of your exchange server

Then double-click and enter in the users name and ie will open the users box

set WshShell = CreateObject("WScript.Shell")
strEmailServer = "exchange"
strUser = inputbox("Username:" & vbcrlf & "Example: jim", ,"jim")
if strUser = "" then wscript.quit
WshShell.Run "iexplore " & strEmailServer & "/exchange/" & strUser

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now