we have users who has the access to terminal server and their PC's desktop.
i am trying to find out whether they send an email from the office or connecting their PC from outside?
i know the message header list if an outsider send an email.
but for the internal users , it does not list the IP.
If someone from the office sends me an email, am I able to tell if it was sent from the office, or if they used the remote connection?