RE: Monitoring email
Yeah but that won't catch everything. What if the person sends a message, then shift deletes it and empties his dumpster all within 30 seconds? The proper answer has been given by Tom and reinforced by Ed. Don't stir the waters now. S. -Original Message- From: Jeremy Johnston [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 5:09 AM To: Exchange Discussions Subject: RE: Monitoring email I would probably set permissions to their mailboxes to allow whome ever you want to open the mailbox so they can see what is going on in all the folders. That would allow constant monitoring without them knowing. Alternatly, exmerge or export out the mailbox to a PST, to see what has occured in the past. Both are very simple and quick solutions that will allow you to build a monitoring serve3r at your leasure. Jeremy Johnston Senior Consultant All Bases Covered _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
I would probably set permissions to their mailboxes to allow whome ever you want to open the mailbox so they can see what is going on in all the folders. That would allow constant monitoring without them knowing. Alternatly, exmerge or export out the mailbox to a PST, to see what has occured in the past. Both are very simple and quick solutions that will allow you to build a monitoring serve3r at your leasure. Jeremy Johnston Senior Consultant All Bases Covered _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
That's why I specified it was for inbound. For outbound he'd have to manually parse the logs. Journaling is the only sane option. We can't, however, assume that sanity will be the choice that is made.G As always, your tag line applies. Tom. -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED]] Sent: Saturday, December 22, 2001 1:18 AM To: Exchange Discussions Subject: RE: Monitoring email Of course, alternate recipient won't catch outbound mail. Message journaling would catch everything. Ed Crowley MCSE+I MVP Tech Consultant Compaq Computer There are seldom good technological solutions to behavioral problems. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Thomas Di Nardo Sent: Wednesday, December 19, 2001 7:59 PM To: Exchange Discussions Subject: RE: Monitoring email Set an alternate recipient up to receive copies of all inbound mail to them (I would use a public folder for this - properly locked down of course); crank up diagnostic logging and log the IMS as William and Martian suggested. You know, it would only take a couple hours to build a monitoring server. You could use a desktop system for this since you're only putting four people on in. Get to work a couple hours early, build the box, and solve your problem the right way. It's a lot easier to bring them to court with the kind of info you would get using this method. Just my $.02 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: Monitoring email
sorry .. i have been absent ;-) of course ...u need www.e-nspect.co.uk now i feel better ;-) g - Original Message - From: Brian Dugas [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Thursday, December 20, 2001 2:13 AM Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
Of course, alternate recipient won't catch outbound mail. Message journaling would catch everything. Ed Crowley MCSE+I MVP Tech Consultant Compaq Computer There are seldom good technological solutions to behavioral problems. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Thomas Di Nardo Sent: Wednesday, December 19, 2001 7:59 PM To: Exchange Discussions Subject: RE: Monitoring email Set an alternate recipient up to receive copies of all inbound mail to them (I would use a public folder for this - properly locked down of course); crank up diagnostic logging and log the IMS as William and Martian suggested. You know, it would only take a couple hours to build a monitoring server. You could use a desktop system for this since you're only putting four people on in. Get to work a couple hours early, build the box, and solve your problem the right way. It's a lot easier to bring them to court with the kind of info you would get using this method. Just my $.02 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
Where is the setting to turn this on? Brian -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:40 PM To: Exchange Discussions Subject: RE: Monitoring email Fire them You could turn on logging in the IMS and crank it up. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
On the IMC connector, Diagnostic Logging tab, Message Archiving, or Protocol Logging turned to MAX. John Matteson; Exchange Manager Geac Corporate Infrastructure Systems and Standards (404) 239 - 2981 With sufficient thrust, pigs fly just fine. - RFC 1925 -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 8:26 AM To: Exchange Discussions Subject: RE: Monitoring email Where is the setting to turn this on? Brian -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:40 PM To: Exchange Discussions Subject: RE: Monitoring email Fire them You could turn on logging in the IMS and crank it up. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
keep a close eye on your hard drive space with max logging. -Original Message- From: John Matteson [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 9:23 AM To: Exchange Discussions Subject: RE: Monitoring email On the IMC connector, Diagnostic Logging tab, Message Archiving, or Protocol Logging turned to MAX. John Matteson; Exchange Manager Geac Corporate Infrastructure Systems and Standards (404) 239 - 2981 With sufficient thrust, pigs fly just fine. - RFC 1925 -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 8:26 AM To: Exchange Discussions Subject: RE: Monitoring email Where is the setting to turn this on? Brian -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:40 PM To: Exchange Discussions Subject: RE: Monitoring email Fire them You could turn on logging in the IMS and crank it up. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
Or you could just let management have access to the said persons mailbox. As part of there outlook profile. Regards Mr Louis Joyce Computer Support Analyst Network Administrator BT Ignite eSolutions -Original Message- From: John Matteson [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 9:23 AM To: Exchange Discussions Subject: RE: Monitoring email On the IMC connector, Diagnostic Logging tab, Message Archiving, or Protocol Logging turned to MAX. John Matteson; Exchange Manager Geac Corporate Infrastructure Systems and Standards (404) 239 - 2981 With sufficient thrust, pigs fly just fine. - RFC 1925 -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 8:26 AM To: Exchange Discussions Subject: RE: Monitoring email Where is the setting to turn this on? Brian -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:40 PM To: Exchange Discussions Subject: RE: Monitoring email Fire them You could turn on logging in the IMS and crank it up. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
The problem there is that the persons manager would have to monitor the mail all day long as this person is fairly computer savvy, they knew how to clean up their PC so there were no traces of internet sites history. Their Inbox, sent items and deleted item were completely empty when checked last night. If a person does a Shift-Delete(perm delete) does this by-pass deleted items retention feature in Exchange? Brian -Original Message- From: Joyce, Louis [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 9:43 AM To: Exchange Discussions Subject: RE: Monitoring email Or you could just let management have access to the said persons mailbox. As part of there outlook profile. Regards Mr Louis Joyce Computer Support Analyst Network Administrator BT Ignite eSolutions -Original Message- From: John Matteson [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 9:23 AM To: Exchange Discussions Subject: RE: Monitoring email On the IMC connector, Diagnostic Logging tab, Message Archiving, or Protocol Logging turned to MAX. John Matteson; Exchange Manager Geac Corporate Infrastructure Systems and Standards (404) 239 - 2981 With sufficient thrust, pigs fly just fine. - RFC 1925 -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 8:26 AM To: Exchange Discussions Subject: RE: Monitoring email Where is the setting to turn this on? Brian -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:40 PM To: Exchange Discussions Subject: RE: Monitoring email Fire them You could turn on logging in the IMS and crank it up. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com
RE: Monitoring email
Yes but using the dumpsteralwayson registry change, deleted items can be recovered. Even if mail doesnt go to deleted items first. Search technet using dumpsteralwayson. Regards Mr Louis Joyce Computer Support Analyst Network Administrator BT Ignite eSolutions -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: 20 December 2001 14:51 To: Exchange Discussions Subject: RE: Monitoring email The problem there is that the persons manager would have to monitor the mail all day long as this person is fairly computer savvy, they knew how to clean up their PC so there were no traces of internet sites history. Their Inbox, sent items and deleted item were completely empty when checked last night. If a person does a Shift-Delete(perm delete) does this by-pass deleted items retention feature in Exchange? Brian -Original Message- From: Joyce, Louis [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 9:43 AM To: Exchange Discussions Subject: RE: Monitoring email Or you could just let management have access to the said persons mailbox. As part of there outlook profile. Regards Mr Louis Joyce Computer Support Analyst Network Administrator BT Ignite eSolutions -Original Message- From: John Matteson [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 9:23 AM To: Exchange Discussions Subject: RE: Monitoring email On the IMC connector, Diagnostic Logging tab, Message Archiving, or Protocol Logging turned to MAX. John Matteson; Exchange Manager Geac Corporate Infrastructure Systems and Standards (404) 239 - 2981 With sufficient thrust, pigs fly just fine. - RFC 1925 -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 8:26 AM To: Exchange Discussions Subject: RE: Monitoring email Where is the setting to turn this on? Brian -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:40 PM To: Exchange Discussions Subject: RE: Monitoring email Fire them You could turn on logging in the IMS and crank it up. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED
RE: Monitoring email
Not to mention, a half way decent firewall with logging turned on will tell you what sites the said user has been accessing. That takes the deleting of History right out of the picture. D Profanity is the one language all programmers know best. -Original Message- From: Joyce, Louis [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 6:52 AM To: Exchange Discussions Subject: RE: Monitoring email Yes but using the dumpsteralwayson registry change, deleted items can be recovered. Even if mail doesnt go to deleted items first. Search technet using dumpsteralwayson. Regards Mr Louis Joyce Computer Support Analyst Network Administrator BT Ignite eSolutions -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: 20 December 2001 14:51 To: Exchange Discussions Subject: RE: Monitoring email The problem there is that the persons manager would have to monitor the mail all day long as this person is fairly computer savvy, they knew how to clean up their PC so there were no traces of internet sites history. Their Inbox, sent items and deleted item were completely empty when checked last night. If a person does a Shift-Delete(perm delete) does this by-pass deleted items retention feature in Exchange? Brian -Original Message- From: Joyce, Louis [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 9:43 AM To: Exchange Discussions Subject: RE: Monitoring email Or you could just let management have access to the said persons mailbox. As part of there outlook profile. Regards Mr Louis Joyce Computer Support Analyst Network Administrator BT Ignite eSolutions -Original Message- From: John Matteson [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 9:23 AM To: Exchange Discussions Subject: RE: Monitoring email On the IMC connector, Diagnostic Logging tab, Message Archiving, or Protocol Logging turned to MAX. John Matteson; Exchange Manager Geac Corporate Infrastructure Systems and Standards (404) 239 - 2981 With sufficient thrust, pigs fly just fine. - RFC 1925 -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 20, 2001 8:26 AM To: Exchange Discussions Subject: RE: Monitoring email Where is the setting to turn this on? Brian -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:40 PM To: Exchange Discussions Subject: RE: Monitoring email Fire them You could turn on logging in the IMS and crank it up. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp
RE: Monitoring email
Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
Fire them You could turn on logging in the IMS and crank it up. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
*suggestively* advise you manager that you follow orders... suggestion Exmerge their mailbox and give it to the appropriate authority at your company. Hence it becomes thier problem. Chnaces are whatever the accused have sent is still in their sent / deleted items folders (even better if you if you have deleted item retention time turned on to 14-30+ days...). /suggestion -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Thursday, 20 December 2001 2:40 PM To: Exchange Discussions Subject: RE: Monitoring email Fire them You could turn on logging in the IMS and crank it up. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
Why couldn't you implement Journaling first thing tomorrow morning? Diagnostic Logging can also capture email content, but sorting through it isn't so much fun and you will need some drive space. Other big brother style methods may be appropriate (*ugh*) like shadowing the desktop. Or perhaps reaffirming policy and suggest that you have the ability and do monitor email. William Lefkovics, MCSE, A+ --- Why just ride, when you can fly? http://www.airborne.net --- Rent this space: [EMAIL PROTECTED] -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Monitoring email
Set an alternate recipient up to receive copies of all inbound mail to them (I would use a public folder for this - properly locked down of course); crank up diagnostic logging and log the IMS as William and Martian suggested. You know, it would only take a couple hours to build a monitoring server. You could use a desktop system for this since you're only putting four people on in. Get to work a couple hours early, build the box, and solve your problem the right way. It's a lot easier to bring them to court with the kind of info you would get using this method. Just my $.02 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -Original Message- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a monitoring server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -Original Message- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
