Email changing outlook 2003/exchange 2010
Posted on 2012-03-20
If user X sends user Y an internal email using the corporate exchange 2010 server. If say for example the text of the email body changed somewhere (both use outlook 2003 to send and receive email), how could you see who edited the actual email body, i.e the sender or the recipient?
Say user Y has an email in there sent box with one version of the email. And user X has it in their inbox with a totally different email body text, how could/can you check which one of them maliciously edited the email body text?
Could it be user Y sends and email, then decides “Oh no I didn’t mean to send that that will get me in trouble I’ll edit my sent email and then blame then on changing it maliciously at their end”.
Or could it be user X receiving the email, then decides “Ah I’ll change this and report on them for sending inappropriate email” so decides to edit the email in their inbox and then leave it there – and then as the sender has deleted their sent email and emptied trash can and its expensive to restore a backup etc etc etc
What audit logs show amendments to email body text and/or attachments? Can you assist on how or where audit logs or modification may be shown? Be it on the client side or on the exchange server side?
How can you prove the item in the sent box and the item in the recipients inbox, if they don’t match – how can you prove who was being naughty and editing it?