Thanks for the interesting comments on this thread. I have had official word from 
several MS support peeps that would seem to resolve the issue. It would seem that 
SHIFT+DELETE marks a message as deleted immediately without it being moved to the 
delted items first. As the message is only MARKED as deleted but not actually deleted 
it is simply not visible to the user but does still remain in the datastore. If items 
are sent to the deleted items they are simply moved to the deleted items. Emptying the 
deleted items marks all the items in that folder as deleted.

So SHIFT+DELETE doesn't permanently delete emails, just permanently hides them from 
the user. The DUMPSTERON reg trick simply makes the dumpster menu item visible on all 
folders rather than just the deleted items folder.

Hope that helps.

Olly 

-----Original Message-----
From: deji Agba [mailto:[EMAIL PROTECTED] 
Sent: 15 January 2004 07:18
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster

I usually refrain from adding to a thread more than once, except to occasionally 
concur. I have always thought that, all things being equal, Shift-Delete is indeed a 
permanent delete, given the following circumstances:
 
>> Assuming you DON'T have deleted item retention enabled - which is the 
>>default configuration  You have not enabled DumpsterAlwaysOn -which is 
>>the default configuration You don't do brick-level backup, you don't 
>>have an offline Exchange server you test restore to, AND you are not 
>>willing to interrupt other users' access to do a live restore
 
I've been known to be wrong before, but I don't think this is one of those moments :-p
 
Sincerely,

Dèjì Akómöláfé, MCSE MCSA MCP+I
www.akomolafe.com
www.iyaburo.com
Do you now realize that Today is the Tomorrow you were worried about Yesterday?  -anon

________________________________

From: Roger Seielstad
Sent: Wed 1/14/2004 4:58 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] GPO and the Outlook Dumpster


But Shift-Delete is not a permanent delete. Assuming you have deleted item retension 
enabled, shift-delete simply marks the message for deletion, but it is still available 
within that folder's dumpster until the DIR time expires, and is accessible using the 
DumpsterAlwaysOn registry setting for Outlook.
 
Scared the crap out of my desktop guy who thought he could hide email...
 
Roger
--------------------------------------------------------------
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc. 

        -----Original Message-----
        From: deji Agba [mailto:[EMAIL PROTECTED] 
        Sent: Wednesday, January 14, 2004 1:40 AM
        To: [EMAIL PROTECTED]
        Subject: RE: [ActiveDir] GPO and the Outlook Dumpster
        
        
        your protection against this "CYA" type of deletion is backup. If you maintain 
a diligent backup of your Exchange Server, you can always do a restore to your offline 
server whenever you need to "prove" something. Disabling access to the "Recover 
Deleted Items" folder will not buy you much with a determined user who wants to cover 
his/her track. Shift-Del will not send deleted items to that folder, you know?
         
        
         
        Sincerely,
        
        Dèjì Akómöláfé, MCSE MCSA MCP+I
        www.akomolafe.com
        www.iyaburo.com
        Do you now realize that Today is the Tomorrow you were worried about 
Yesterday?  -anon

________________________________

        From: Oliver Marshall
        Sent: Tue 1/13/2004 12:07 PM
        To: [EMAIL PROTECTED]
        Subject: RE: [ActiveDir] GPO and the Outlook Dumpster
        
        
        Because while the Recover Deleted Items addin allows you...err...recover
        deleted items a user can also delete things permanently. We have had
        people 'covering their tracks' by deleting emails.
        
        I don't want to disable the feature all together as it's a useful IT
        tool for managers etc, but not for users.
        
        Olly 
        
        -----Original Message-----
        From: David, Andy [mailto:[EMAIL PROTECTED] 
        Sent: 13 January 2004 19:15
        To: [EMAIL PROTECTED]
        Subject: RE: [ActiveDir] GPO and the Outlook Dumpster
        
        I'm just wondering why you would want to implement such a thing. 
         
        
        -----Original Message-----
        From: Roger Seielstad [mailto:[EMAIL PROTECTED]
        Sent: Tuesday, January 13, 2004 12:27 PM
        To: '[EMAIL PROTECTED]'
        Subject: RE: [ActiveDir] GPO and the Outlook Dumpster
        
        It strikes me that it might be part of the Office Administration
        Templates, which can be distributed via GPOs, but aren't actually part
        of the GPO settings.
        
        http://www.microsoft.com/office/ork/2003/five/ch18/MntA04.htm
        
        There are similar templates for Office XP and Office 2000 that might do
        the trick.
        
        Roger
        --------------------------------------------------------------
        Roger D. Seielstad - MTS MCSE MS-MVP
        Sr. Systems Administrator
        Inovis Inc.
        
        
        > -----Original Message-----
        > From: Oliver Marshall [mailto:[EMAIL PROTECTED]
        > Sent: Tuesday, January 13, 2004 11:19 AM
        > To: [EMAIL PROTECTED]
        > Subject: [ActiveDir] GPO and the Outlook Dumpster
        > 
        > 
        > Does anyone know a GPO setting that will allow me to prevent users 
        > from accessing the Recover Deleted Items addin in Outlook ? Someone on
        
        > an exchange mailing list said that there is a GP setting to prevent 
        > this addin being loaded.
        > 
        > Olly
        > List info   : http://www.activedir.org/mail_list.htm
        > List FAQ    : http://www.activedir.org/list_faq.htm
        > List archive: 
        > http://www.mail-archive.com/activedir%> 40mail.activedir.org/
        > 
        List info   : http://www.activedir.org/mail_list.htm
        List FAQ    : http://www.activedir.org/list_faq.htm
        List archive:
        http://www.mail-archive.com/activedir%40mail.activedir.org/
        List info   : http://www.activedir.org/mail_list.htm
        List FAQ    : http://www.activedir.org/list_faq.htm
        List archive:
        http://www.mail-archive.com/activedir%40mail.activedir.org/
        
        List info   : http://www.activedir.org/mail_list.htm
        List FAQ    : http://www.activedir.org/list_faq.htm
        List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to