User reporting emails being read by someone/thing else...

2x of my users have recently reported that email have been marked as read (not by them).

They have recently had an ipad thats using active sync and i'm guess this could have read them, but one of the users has said the ipad wasn't being used...

can i see what and when the emails were read?

what else could have cause this to happen?

Who is Participating?
If user is using outlook then you can check on exchange server his/her last login, there you can find that when someone has used his/her account, maybe someone has access to users mailbox and he is trying to see the mails.

Thats the only way to find out but you need to ask user when you ahd last logged in and logout of outlook to keep a track of that.
Good suggested above.
In Exchange management console, we can check users last login/logoff time report to find out their last access in exchange server.
CHI-LTDAuthor Commented:
any advise as to exactly what event logs will show this?
You can check that in exchange console
CHI-LTDAuthor Commented:
seems to be the only way..
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.