Prev: Auditing public folders
Next: "You do not have permission to send to this recipient"
From: Ed Crowley [MVP] on 19 Jan 2010 14:16
Actually he is right in that users can purge deleted items. The only answer
to this problem is to enable server-based archiving (message journaling),
preferably coupled with a third-party add-on solution.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
..

"Asher_N" <compguy666(a)hotmail.com> wrote in message
news:Xns9D05885AE72Eashernatgmailcom(a)207.46.248.16...
> "2Sweet" <chongcmw(a)hotmail.com> wrote in
> news:usYInEQmKHA.6096(a)TK2MSFTNGP02.phx.gbl:
>
>> If the sender deleted the email instantly from the "Sent Items" and
>> trash after send out the email. I would be able to trace it.
>> Sender can denied whatever he had did.
>>
>>
>> "Ed Crowley [MVP]" <curspice(a)nospam.net> wrote in message
>> news:u%23$4aTGmKHA.3476(a)TK2MSFTNGP06.phx.gbl...
>>> (1) The administrator can grant himself rights to the company user's
>>> mailbox and log into that mailbox. The administrator's action might
>>> be detected by the user if he makes any changes. (2) The
>>> administrator can restore the database from some point in time to an
>>> off-network recovery server and look at the mail in a similar fashion
>>> if it is believed that the message might have been deleted, and/or to
>>> reduce the risk of being detected by the user. Or the administrator
>>> can use a tool like Ontrack PowerControls or Quest Recovery Manager
>>> to restore selected messages from a backup. (3) The administrator
>>> can examine the messages sent using Message Tracking, but that will
>>> not show the content, just the header information.
>>> --
>>> Ed Crowley MVP
>>> "There are seldom good technological solutions to behavioral
>>> problems." .
>>>
>>> "2Sweet" <cmchong20(a)yahoo.com> wrote in message
>>> news:O44IE4FmKHA.4148(a)TK2MSFTNGP05.phx.gbl...
>>>> In MS Exchange 2003 Server,
>>>>
>>>> Is it possible for an administrator to view a particular email
>>>> content sent by a company user? Or 3rd party tools/utility?
>>>>
>>>> The purpose of doing so, eg. suspect a user sent out offense/attack
>>>> email.
>>>>
>>>
>>
>
> After the deleted folder is emptied, th emails are kept on the server for
> a predetermined amount of time, default 30 days.
>
> Server could also have message journalling on, copying every in and
> outbound emails in real time.

From: Ed Crowley [MVP] on 19 Jan 2010 14:17
There are some 60 such solutions in addition to Mr. Elliot's self-serving
recommendation.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
..

"John Elliot" <johne(a)anonymous.com> wrote in message
news:%235C%23iWRmKHA.2780(a)TK2MSFTNGP05.phx.gbl...
> We use a third party tool called Xeams (http://xeams.com), which does a
> very good job of message archiving and searching. You can use it along
> with your Exchange. Xeams allows policy violation alerts that searches for
> some predefined contents in incoming or outgoing email and sends an alert
> to administrator if company policy gets violated.
>
> JE.
>
>
>
> On 1/18/2010 11:50 AM, 2Sweet wrote:
>> In MS Exchange 2003 Server,
>>
>> Is it possible for an administrator to view a particular email content
>> sent
>> by a company user? Or 3rd party tools/utility?
>>
>> The purpose of doing so, eg. suspect a user sent out offense/attack
>> email.
>>
>>
>

First  |  Prev  | 
Pages: 1 2
Prev: Auditing public folders
Next: "You do not have permission to send to this recipient"