Use this as an opportunity to practice your disaster recovery. Recover the server to your locked, network-separated lab and use Outlook to open the mailbox there. Better, let Security peruse the mailbox there. There should be no risk of error or detection, and you are in less of a position to lose the trust of your customers. Be sure that you have a written request from someone in authority and the directive of your immediate supervisor.
Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hague, Jeff Sent: Wednesday, March 31, 2004 5:31 AM To: Exchange Discussions Subject: capturing a users mail I have been tasked with copying a users mailbox who is suspected of "illegal" activity. This is something that I have never had to do "incognito". I need to get the inbox and sent items (at least) without alerting the user that this has happened. I can give myself access to the mailbox and then either log in using Outlook/MAPI or Outlook Express/POP3 but I am concerned that either method will mark the mail that I copy as having been read, possibly alerting the user that something is up. Does anyone have any suggestions for doing this? Jeff PS - Policy states that this is allowed so I am not concerned from a liability standpoint - the "Powers that be" want this done covertly though in case their suspicions are wrong... _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
