users mailbox for someone about to get fired
Posted on 2014-01-21
Our boss just came to use with this email. Looking for some feedback as to where to maybe start. Sounds like someone is about to get fired and a lawsuit filed. more work for IT.
The mailbox size I don't know of any way to setup monitoring unless I have a spare PC setup with her Outlook profile running. Looking for ideas.
We run a barracuda backup server, so I think i can recover everything from there.
The network drive isn't what I am worried about, I got that under control but also looking for ideas.
"What we need to do now is (two things):
1 - Do a before and after on her mailbox size. As in has there been a dramatic change in size in the past week or so compared to today? Has it shrunk recently. Before and after sizes should be provided. If messages can be recovered they can then be put somewhere besides her email box. DO NOT RESTORE HER EMAIL BOX. If they cannot be restored to a different location without alerting her or messing her mailbox up or causing issues do not do anything to restore them.
2 - Do a before and after on her network drive size. Same as the mailbox - check to see if a bunch of data has been removed, transferred and/ or deleted. Provide the sizes before and after. If you find network files deleted - restore them to somewhere else that she cannot see - only we can. Use the Barracuda for this if needed or would work best. Do not do anything that would alert her.
Please let me know who is going to handle this and what you find. If you can do the size checks quickly just do that and let me know. The recovery can wait - the changes in size request is more immediate.