Snooping

2003-12-10 Thread Orin Rehorst
Boss says organization has probable cause. Wants best way to copy users data for 
perusal by others (inbox, sent, and deleted folders).

Please assist.

TIA

Regards, 
Orin 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Snooping

2003-12-10 Thread David, Andy
Exmerge


-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 9:38 AM
To: Exchange Discussions
Subject: Snooping


Boss says organization has probable cause. Wants best way to copy users data
for perusal by others (inbox, sent, and deleted folders).

Please assist.

TIA

Regards, 
Orin 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Snooping

2003-12-10 Thread Eric Fretz
Doesn't Exmerge still keep user permissions?

Eric Fretz

L-3 Communications
ComCept Division
2800 Discovery Blvd.
Rockwall, TX 75032
tel:   972.772.7501
fax:  972.772.7510



-Original Message-
From: David, Andy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 8:40 AM
To: Exchange Discussions
Subject: RE: Snooping


Exmerge


-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 9:38 AM
To: Exchange Discussions
Subject: Snooping


Boss says organization has probable cause. Wants best way to copy users data
for perusal by others (inbox, sent, and deleted folders).

Please assist.

TIA

Regards, 
Orin 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Snooping

2003-12-10 Thread David, Andy
Not on a pst.


-Original Message-
From: Eric Fretz [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 9:47 AM
To: Exchange Discussions
Subject: RE: Snooping


Doesn't Exmerge still keep user permissions?

Eric Fretz

L-3 Communications
ComCept Division
2800 Discovery Blvd.
Rockwall, TX 75032
tel:   972.772.7501
fax:  972.772.7510



-Original Message-
From: David, Andy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 8:40 AM
To: Exchange Discussions
Subject: RE: Snooping


Exmerge


-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 9:38 AM
To: Exchange Discussions
Subject: Snooping


Boss says organization has probable cause. Wants best way to copy users data
for perusal by others (inbox, sent, and deleted folders).

Please assist.

TIA

Regards, 
Orin 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Snooping

2003-12-10 Thread Eric Fretz
Do'h!  Sorry, brain freeze.  I knew better.

Eric Fretz

L-3 Communications
ComCept Division
2800 Discovery Blvd.
Rockwall, TX 75032
tel:   972.772.7501
fax:  972.772.7510



-Original Message-
From: David, Andy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 8:51 AM
To: Exchange Discussions
Subject: RE: Snooping


Not on a pst.


-Original Message-
From: Eric Fretz [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 9:47 AM
To: Exchange Discussions
Subject: RE: Snooping


Doesn't Exmerge still keep user permissions?

Eric Fretz

L-3 Communications
ComCept Division
2800 Discovery Blvd.
Rockwall, TX 75032
tel:   972.772.7501
fax:  972.772.7510



-Original Message-
From: David, Andy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 8:40 AM
To: Exchange Discussions
Subject: RE: Snooping


Exmerge


-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 9:38 AM
To: Exchange Discussions
Subject: Snooping


Boss says organization has probable cause. Wants best way to copy users data
for perusal by others (inbox, sent, and deleted folders).

Please assist.

TIA

Regards, 
Orin 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Snooping

2003-12-10 Thread Martin Blackstone
Be sure to tell exmerge to recover items from dumpster 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Eric Fretz
Sent: Wednesday, December 10, 2003 6:54 AM
To: Exchange Discussions
Subject: RE: Snooping

Do'h!  Sorry, brain freeze.  I knew better.

Eric Fretz

L-3 Communications
ComCept Division
2800 Discovery Blvd.
Rockwall, TX 75032
tel:   972.772.7501
fax:  972.772.7510



-Original Message-
From: David, Andy [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 10, 2003 8:51 AM
To: Exchange Discussions
Subject: RE: Snooping


Not on a pst.


-Original Message-
From: Eric Fretz [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 9:47 AM
To: Exchange Discussions
Subject: RE: Snooping


Doesn't Exmerge still keep user permissions?

Eric Fretz

L-3 Communications
ComCept Division
2800 Discovery Blvd.
Rockwall, TX 75032
tel:   972.772.7501
fax:  972.772.7510



-Original Message-
From: David, Andy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 8:40 AM
To: Exchange Discussions
Subject: RE: Snooping


Exmerge


-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 9:38 AM
To: Exchange Discussions
Subject: Snooping


Boss says organization has probable cause. Wants best way to copy users data
for perusal by others (inbox, sent, and deleted folders).

Please assist.

TIA

Regards, 
Orin 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Snooping

2003-12-10 Thread Michael Henry
You also set the user's account to co-delivery to a second e-mail account as
a quick dirty way to journal the account.

under Delivery Options, be sure to check the delivery to both recipients.

This does not capture outbound mail, where most likely is the best evidence
your looking for.  If they are a watchful user, they would most likely
delete the Sent Items and the Deleted's right away for their own safety.

Regards,  Michael

-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 10, 2003 8:38 AM
To: Exchange Discussions
Subject: Snooping


Boss says organization has probable cause. Wants best way to copy users data
for perusal by others (inbox, sent, and deleted folders).

Please assist.

TIA

Regards, 
Orin 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Snooping

2003-12-10 Thread John Parker
You could always simply gain access to said users system and give perms that way as 
well.
The simply open the needed folders accordingly from permissioned users outlook...



John Parker, MCSE
IS Admin.
Senior Technical Specialist
Alpha Display Systems.

Alpha Video
7711 Computer Ave.
Edina, MN. 55435
 
952-896-9898 Local
800-388-0008 Watts
952-896-9899 Fax
612-804-8769 Cell
952-841-3327 Direct

[EMAIL PROTECTED]
Be excellent to each other
---End of Line---




-Original Message-
From: Michael Henry [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 10, 2003 11:30 AM
To: Exchange Discussions
Subject: RE: Snooping


You also set the user's account to co-delivery to a second e-mail account as
a quick dirty way to journal the account.

under Delivery Options, be sure to check the delivery to both recipients.

This does not capture outbound mail, where most likely is the best evidence
your looking for.  If they are a watchful user, they would most likely
delete the Sent Items and the Deleted's right away for their own safety.

Regards,  Michael

-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 10, 2003 8:38 AM
To: Exchange Discussions
Subject: Snooping


Boss says organization has probable cause. Wants best way to copy users data
for perusal by others (inbox, sent, and deleted folders).

Please assist.

TIA

Regards, 
Orin 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Snooping

2003-12-10 Thread Eric Fretz
blatant sarcasm
Or... You could setup your own Echlon system and capture all the packets
that you want.  I think that Carnegie Mellon University might be able to
help you out with that. 
/blatant sarcasm

Eric Fretz

L-3 Communications
ComCept Division
2800 Discovery Blvd.
Rockwall, TX 75032
tel:   972.772.7501
fax:  972.772.7510



-Original Message-
From: John Parker [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 11:33 AM
To: Exchange Discussions
Subject: RE: Snooping


You could always simply gain access to said users system and give perms that
way as well. The simply open the needed folders accordingly from
permissioned users outlook...



John Parker, MCSE
IS Admin.
Senior Technical Specialist
Alpha Display Systems.

Alpha Video
7711 Computer Ave.
Edina, MN. 55435
 
952-896-9898 Local
800-388-0008 Watts
952-896-9899 Fax
612-804-8769 Cell
952-841-3327 Direct

[EMAIL PROTECTED]
Be excellent to each other
---End of Line---




-Original Message-
From: Michael Henry [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 10, 2003 11:30 AM
To: Exchange Discussions
Subject: RE: Snooping


You also set the user's account to co-delivery to a second e-mail account as
a quick dirty way to journal the account.

under Delivery Options, be sure to check the delivery to both recipients.

This does not capture outbound mail, where most likely is the best evidence
your looking for.  If they are a watchful user, they would most likely
delete the Sent Items and the Deleted's right away for their own safety.

Regards,  Michael

-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 10, 2003 8:38 AM
To: Exchange Discussions
Subject: Snooping


Boss says organization has probable cause. Wants best way to copy users data
for perusal by others (inbox, sent, and deleted folders).

Please assist.

TIA

Regards, 
Orin 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Snooping

2003-12-10 Thread Ed Crowley [MVP]
Practice your disaster recovery by restoring the entire system from the most
recent backup to a lab machine.  Grant the snoop permissions to that mailbox
and invite him to come down to the lab to look at whatever he wants to see.

Ed Crowley MCSE+Internet MVP
Freelance E-Mail Philosopher
Protecting the world from PSTs and Bricked Backups!T

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Orin Rehorst
Sent: Wednesday, December 10, 2003 6:38 AM
To: Exchange Discussions
Subject: Snooping

Boss says organization has probable cause. Wants best way to copy users data
for perusal by others (inbox, sent, and deleted folders).

Please assist.

TIA

Regards,
Orin 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang
=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]