Either remove his access completely - let him get suspicious or make sure that it is an offence to remove log files without storing them first (as an EVT file - NOT csv)
Tris --------------------------------------------- Tristan Gayford Deputy Systems & Network Manager Cranfield University at Silsoe -----Original Message----- From: David Fortuna [mailto:[EMAIL PROTECTED]] Sent: 08 April 2002 15:02 To: Exchange Discussions Subject: Monitoring access I have an exchange 5.5 e-mail server running on Windows NT 4.0 server. I have a network tech that is accessing peoples mailboxes just for the sake of snooping. This is something I have had trouble prooving, everytime he does it he deletes the log created in the event viewer of the NT server. If there was a way to recover the event viewer it would be easy to prove. Is there a way within Exchange to prove something like this. I do not want to get him suspicous by removing his rights to access things. Please help!!! _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
