Senior engineer, illicit monitoring of emails

I work as an infrastructure tech for a uni, and the senior engineer in my office has caused untold amount of issues.

Via HR, we got him to admit his activities, one of which is monitoring staff emails.   (I know its illegal unless it comes from senior management).

However, the uni isn't great, and I still believe he is monitoring emails.

So, to explain, I am in Office 365, but have my AD account.  We also have people on prem with AD accounts, and will be migrated eventually.

We set up a test, from HR to myself and another in HR.  HR are still onprem.  I found the corresponding exchange log, however 30 minutes are missing from this day.

Is there a way I can tell if he is still monitoring?
Michelle LeonardInfrastructure EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

yo_beeDirector of Information TechnologyCommented:
Personally I think if he was warned and the is suspicion this person is still doing this and you already have evidence that there was snooping why not just fire this clown.

Another option is to remove his right from the mailboxes and appoint someone else as the Exchange admin.
0
Michelle LeonardInfrastructure EngineerAuthor Commented:
I agree, but its not down to me.  I will talk with my line manager when he is back from hols, but others are worried about what he is doing as well. He admitted it, but I think to fire him, some evidence would be required.
Because he has full admins and is senior to the office, he's the one changing the permissions.   Its a good idea though thanks
0
Dr. KlahnPrincipal Software EngineerCommented:
Go see a lawyer before you do anything at all.  Find out what your rights are and where they end, and what you can and cannot do under your employment contract with the university.  The waters are already roiling; you don't want your employer deciding that you need to be disciplined as an example.  Then take at least a week to think it over and decide what you want to do.

Be aware that if you turn whistleblower, this will be the end of your job there -- if not, you'll never see anothe promotion -- and most likely you'll be blacklisted at any other educational or government institution.  So it has to be worth a lot of money to go that route.
0
it_saigeDeveloperCommented:
As for the telling if they are still monitoring.  It depends on how they monitor said mailboxes.  If they connect directly, this event can be audited on the exchange server.

https://docs.microsoft.com/en-us/exchange/policy-and-compliance/non-owner-mailbox-access-reports

-saige-
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Michelle LeonardInfrastructure EngineerAuthor Commented:
All very helpful responses, I am already aware of the legal implications, as I am studying courses, so thank you Dr.Klahn for that advise as well.  HR here have updated their policy, whereby the whistleblower if the information is found to be false will be sacked, however he has already admitted his activities, its just the evidence I needed.

Thanks all of you, really helpful
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Office

From novice to tech pro — start learning today.