?
Solved

Determining the true time stamp on an email

Posted on 2008-06-11
3
Medium Priority
?
304 Views
Last Modified: 2008-06-20
I need to identify in Windows Exchange 2003 when an external email was actually sent.  The time stamp that the receiver has on the email that was sent to her is for Wednesday, June 11, 2008 6:12 AM.  The time stamp that the sender shows from her sent email is Tuesday, June 10, 2008 4:06 PM.  My question is this how can I check within Exchange, to see when that message was sent?  Is there a way to check this?
0
Comment
Question by:usts-pw
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 5

Accepted Solution

by:
wtstadd earned 2000 total points
ID: 21763460
You can look at the header information, it will have the time stamps that are true.
0
 

Author Comment

by:usts-pw
ID: 21763615
I have looked at this.  What I am concerned about is that the sender sent herself a forwarded email and then took that timestamp information and changed it, then sent that to her boss.  I am also going to log onto her machine and check her sent items in hope that she has not deleted that.  I was really trying to see if there was some auditing in Exchange that shows all of the emails in there true unaltered states that I could look.  Make sense?
0
 
LVL 5

Expert Comment

by:wtstadd
ID: 21763693
You can look at the SMTP Logs in \Windows\System32\LogFiles\SMTPSVC

You might be able to get enough information from the e-mail to find it in those logs.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question