Also a user can only be reading someone else's mail if they have access to. If you check permissions on the server and the client whose mail is being read, you can narrow down who you're looking for ...
> -----Original Message----- > From: Ed Crowley [SMTP:[EMAIL PROTECTED]] > Sent: Friday, February 01, 2002 9:23 AM > To: Exchange Discussions > Subject: RE: User reading someone else's mailbox > > There are events in the event log. Just look and you'll see. > Unfortunately, these events do not tell you that someone has read the > e-mail, just that they attempted to connect to the mailbox. Opening the > user's calendar, for example, will trigger an event. Therefore, don't > fire someone based solely on entries in the event log. > > Ed Crowley MCSE+Internet MVP kcCC+I > Tech Consultant > Compaq Computer Corporation > Protecting the world from PSTs and Bricked Backups! > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Saul > Sent: Thursday, January 31, 2002 2:16 PM > To: Exchange Discussions > Subject: User reading someone else's mailbox > > > How can we find out if someone has gained access to someone else's > mailbox and reading their email? I know you can look at the event log > but what do I look for? What is the Category and event it would log? > > Thanks > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
