<div>
If you have the original email you can look at the message internet headers and it should show the internal IP/FQDN it originated from. If you're running Exchange and had Transport logging turned on to the max it probably would have showed up as well in your Application log on the server.
</div>


If you have the original email you can look at the message internet headers and it should show the internal IP/FQDN it originated from. If you're running Exchange and had Transport logging turned on to the max it probably would have showed up as well in your Application log on the server.

<div>
<div class="content wysiwyg-content">
 the kicker is, I need to track what workstation on the internal domain it was sent from? Is this possible? 
</div>
</div>


 the kicker is, I need to track what workstation on the internal domain it was sent from? Is this possible? 

We need to track a message sent from outlook.

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

Exchange

Microsoft Outlook is a personal information manager from Microsoft, available as a part of the Microsoft Office suite. Although often used mainly as an email application, it also includes a calendar, task manager, contact manager, note-taker, journal, and web browser.