Is it possible from tracking logs to determine if an email was sent from a users smartphone device where corporate mail is synched to their private smartphone (i.e. without direct connection to the network and from outlook etc), as opposed to determine if an email was sent when logged into our domain on a corporate PC and sent from outlook etc. Or would you need the actual emails and to look at the internet headers to acheive this? If it can be done in the logs can anyone give some pointers on how?