Solved

See who opened/read an email

Posted on 2012-03-28
7
3,395 Views
Last Modified: 2012-03-28
I am having an issue where someone in my organization sent sensitive data to all users in the organization. I have successfully retracted the email, but now the request was made for me to find out who actually opened the email before I was able to retract it. Is there any way to do this in exchange 2010?
0
Comment
Question by:dcts
7 Comments
 
LVL 25

Accepted Solution

by:
Tony Giangreco earned 125 total points
Comment Utility
If the user requested to be notified on that email being received and or opened, the sender would have received those notifications by email. Since you retracted that email, the only way to look further into it is to log into that person's mailbox and see if those notification are there. They could have been deleted so you might need to recover deleted mail.

You can alo ise the mail tracking tool to determine who the mail was sent to. it might tell you if the mail was actually opened.

Hope this helps.
0
 
LVL 15

Assisted Solution

by:jerseysam
jerseysam earned 125 total points
Comment Utility
Not as far as i know.

I think you need to have Exchange Server Mailbox Audit turned on in Exchange. See link:
http://exchangeserverpro.com/exchange-2010-mailbox-audit-logging

Otherwise you are looking at 3rd party software.

1 problem is that if the user has a preview view enabled then he could see the conents of the mail without actually opening it.
0
 
LVL 25

Expert Comment

by:Tony Giangreco
Comment Utility
Yes, I agree. there probably is a 3rd party app that provides this functionality also.
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 
LVL 13

Assisted Solution

by:IT_Crowd
IT_Crowd earned 125 total points
Comment Utility
Here are four scenarios that explain what happens when message recall is tried in various situations.

http://office.microsoft.com/en-us/outlook-help/recall-or-replace-an-email-message-that-you-sent-HA010354931.aspx

Hope this helps.
0
 
LVL 15

Expert Comment

by:jerseysam
Comment Utility
Somthing like:
http://www.didtheyreadit.com/

But i dont think you will be able to see who has read the mails already sent. Unless you can check logs on the user PC itself.
0
 
LVL 16

Assisted Solution

by:Syed_M_Usman
Syed_M_Usman earned 125 total points
Comment Utility
Dear,
apart from all above if your Mgmt want to see who read that confidential email, you can simply add any mgmt account to all users and give full permission.

open owa and via web go to date the email was sent, if you see open box means email was atleat opened,,, if you see closed means email was not open,,,, same thing apply even in deleted emails...
for future purpose you can enable auditing....
0
 
LVL 25

Expert Comment

by:Tony Giangreco
Comment Utility
Glad I could assist.
0

Featured Post

Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

Join & Write a Comment

Suggested Solutions

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now