Not to mention, a half way decent firewall with logging turned on will tell you what sites the said user has been accessing. That takes the deleting of History right out of the picture.
D "Profanity is the one language all programmers know best." -----Original Message----- From: Joyce, Louis [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 6:52 AM To: Exchange Discussions Subject: RE: Monitoring email Yes but using the dumpsteralwayson registry change, deleted items can be recovered. Even if mail doesnt go to deleted items first. Search technet using dumpsteralwayson. Regards Mr Louis Joyce Computer Support Analyst Network Administrator BT Ignite eSolutions -----Original Message----- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: 20 December 2001 14:51 To: Exchange Discussions Subject: RE: Monitoring email The problem there is that the persons manager would have to monitor the mail all day long as this person is fairly computer savvy, they knew how to "clean up" their PC so there were no traces of internet sites history. Their Inbox, sent items and deleted item were completely empty when checked last night. If a person does a Shift-Delete(perm delete) does this by-pass deleted items retention feature in Exchange? Brian -----Original Message----- From: Joyce, Louis [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 9:43 AM To: Exchange Discussions Subject: RE: Monitoring email Or you could just let management have access to the said persons mailbox. As part of there outlook profile. Regards Mr Louis Joyce Computer Support Analyst Network Administrator BT Ignite eSolutions -----Original Message----- From: John Matteson [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 9:23 AM To: Exchange Discussions Subject: RE: Monitoring email On the IMC connector, Diagnostic Logging tab, Message Archiving, or Protocol Logging turned to MAX. John Matteson; Exchange Manager Geac Corporate Infrastructure Systems and Standards (404) 239 - 2981 With sufficient thrust, pigs fly just fine. - RFC 1925 -----Original Message----- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 8:26 AM To: Exchange Discussions Subject: RE: Monitoring email Where is the setting to turn this on? Brian -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:40 PM To: Exchange Discussions Subject: RE: Monitoring email Fire them.... You could turn on logging in the IMS and crank it up. -----Original Message----- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -----Original Message----- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a "monitoring" server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -----Original Message----- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]