Link to home
Start Free TrialLog in
Avatar of jmahlmann
jmahlmann

asked on

need to trace a user on sbs 2008

We have a user that we believe is doing something malicious. Anyone help with software or MS tools that can help track what the user is doing? I don't want to track the computer as they can access more than one computer.
Avatar of Manpreet SIngh Khatra
Manpreet SIngh Khatra
Flag of India image

What tracking you want to do ? MessageTracking ? Copy of all emails ? What is the MailboxDatabase size as for it you can enable Journaling and any mailbox sending\receiving anything would be recorded and email to this mailbox

Are you want to check sending\receiving

- Rancy
Avatar of jmahlmann
jmahlmann

ASKER

We want to trace what they do. We are afraid they are going in and deleting docs, changing docs. Same with emails.
ASKER CERTIFIED SOLUTION
Avatar of Manpreet SIngh Khatra
Manpreet SIngh Khatra
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Okay they now just want to trace the exchange email and see if they delete anything in their mail boxes. I set up the exchange auditing, but I can't see if they delete anything from their email??

I configured folder access, message access, etc...

Also, I can sort by user name? When I add the field user it show n/a even though it has username info in the event logs?