Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

how to trace user location if he is using exchange mail server to send mail.

Posted on 2011-09-21
8
Medium Priority
?
277 Views
Last Modified: 2012-05-12
Hi, One of my user is using his mailbox sitting at unknown location i want to know from where he might be usin blackberry device or laptp to send email. i m exchange administrator and can access his mailbox as well but dont knw how to trace his location.

It is big urgent .
0
Comment
Question by:bhupinderk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 15

Expert Comment

by:mcp_jon
ID: 36572807
You can try checking the IIS logs and check for the Device= xxx.

There you will notice an IP range. From that range, search and see to which operator it belongs :)

Hope this helps.

0
 

Author Comment

by:bhupinderk
ID: 36572816
Can you plz help me steps to follow.
0
 
LVL 15

Expert Comment

by:mcp_jon
ID: 36572860
First get the IIS logs, in this case the HTTP ones.
Then download "Windows Grep" and run it against the folder.
Search by the user name :)

This will return the list of connections done by the user.

Get the Ip's per connection, in Excel and create a report.

After this, search the weba nd try to find the "area" where those IP's can be accessed.

Cheers.
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:bhupinderk
ID: 36573026
hi, All done and got all report via windows grep and found IP address too but it belongs to Data card Dongle but by this mean i cannt get the user location i m only getting IP which tells only ISP info on web. not user location .

Please help me finding user location how can we trace it if we know IP address.
0
 
LVL 15

Accepted Solution

by:
mcp_jon earned 500 total points
ID: 36573053
That's a bit harder !!

But you can check here :
IP Address Locator - Enter an IP address to find its location - Lookup Country Region City etc
http://www.geobytes.com/IpLocator.htm

Otherwise, you may be stucked with "the ISP" and, if 3G access, he can be anyhwere :)

Get it ?

Cheers.
0
 

Author Comment

by:bhupinderk
ID: 36580308
Cheers :) it solved almost my problem
0
 

Author Closing Comment

by:bhupinderk
ID: 36580313
It solved my prblem
0
 
LVL 15

Expert Comment

by:mcp_jon
ID: 36583606
Thank you :)
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
The core idea of this article is to make you acquainted with the best way in which you can export Exchange mailbox to PST format.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates‚Ķ
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question