Oddly timed read receipts
I look after the IT infrastructure for a small business. Approx 50 users. We use Office 365.
The owner is a bit of a paranoid control freak, and often becomes perturbed at pretty minor issues. The most recent one is read receipts being received when no one should be able to access the mailbox. AD is not integrated, and users do not have access to their office 365 outlook account credentials.
Most recent ones have been "was deleted without being read" receipts, with a timestamp shortly after midnight. The user in question has no remote access, and so could not have deleted the message at that time. Time zones are all set correctly, and there is no archiving in place.
Any ideas on how I can run some auditing, check some logs and somehow determine the exact event that fired this not read receipt?
The owner is a bit of a paranoid control freak, and often becomes perturbed at pretty minor issues. The most recent one is read receipts being received when no one should be able to access the mailbox. AD is not integrated, and users do not have access to their office 365 outlook account credentials.
Most recent ones have been "was deleted without being read" receipts, with a timestamp shortly after midnight. The user in question has no remote access, and so could not have deleted the message at that time. Time zones are all set correctly, and there is no archiving in place.
Any ideas on how I can run some auditing, check some logs and somehow determine the exact event that fired this not read receipt?
ASKER
OK, seems to be a good way to proceed, but I can't get there. :(
I managed to bring up Powershell and enable auditing. (including for the mailbox owner).
What I cannot do, is access the logs. Instructions say "2.In the Compliance Center, click Reports". I have searched everywhere that seems logical in the compliance center, however I cannot locate the "reports" link. The screenshot shows what I see,
Any ideas?
I managed to bring up Powershell and enable auditing. (including for the mailbox owner).
What I cannot do, is access the logs. Instructions say "2.In the Compliance Center, click Reports". I have searched everywhere that seems logical in the compliance center, however I cannot locate the "reports" link. The screenshot shows what I see,
Any ideas?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Note that Owner actions cannot be audited in EO.