Prev: Duplicate copies of message received by Distribtuion Group?
Next: Exchange MTA Issue
From: Jasper Recto on 11 May 2010 14:26
Are there any email logs that show the details for past emails SENT and
RECEIVED?

For legal reasons, we need to review past activity of a former employee but
their Outlook is fairly clean and they did not keep any old content. Is it
possible to review any logs that would give us email content?

If not, are there any software that can store this type of activity?

Thanks,
Jasper


From: Mark Arnold [MVP] on 11 May 2010 19:19
On Tue, 11 May 2010 14:26:27 -0400, "Jasper Recto"
<jrecto99(a)yahoo.com> wrote:

>Are there any email logs that show the details for past emails SENT and
>RECEIVED?
>
>For legal reasons, we need to review past activity of a former employee but
>their Outlook is fairly clean and they did not keep any old content. Is it
>possible to review any logs that would give us email content?
>
>If not, are there any software that can store this type of activity?
>
>Thanks,
>Jasper
>
Yes - if you had Message Tracking turned on.
Otherwise, not so much.
From: Jasper Recto on 12 May 2010 12:47
Does Message Tracking allow me to actually read the messages? How do turn
it on in Exchange 2007?

Thanks,
Jasper
"Mark Arnold [MVP]" <mark(a)mvps.org> wrote in message
news:0gpju5t1aqsj8iqc6phbj2mdqdv398gsec(a)4ax.com...
> On Tue, 11 May 2010 14:26:27 -0400, "Jasper Recto"
> <jrecto99(a)yahoo.com> wrote:
>
>>Are there any email logs that show the details for past emails SENT and
>>RECEIVED?
>>
>>For legal reasons, we need to review past activity of a former employee
>>but
>>their Outlook is fairly clean and they did not keep any old content. Is
>>it
>>possible to review any logs that would give us email content?
>>
>>If not, are there any software that can store this type of activity?
>>
>>Thanks,
>>Jasper
>>
> Yes - if you had Message Tracking turned on.
> Otherwise, not so much.


From: Mark Arnold [MVP] on 12 May 2010 18:48
No, you cannot read the messages. To read them you either need to
break open the person's mailbox, open their dumpster and read them (if
they've deleted their deleted items) or restore AD and Exchange to the
lab environment and then do the same again (if you've deleted their
account).
 | 
Pages: 1
Prev: Duplicate copies of message received by Distribtuion Group?
Next: Exchange MTA Issue