Set an alternate recipient up to receive copies of all inbound mail to them (I would use a public folder for this - properly locked down of course); crank up diagnostic logging and log the IMS as William and Martian suggested.
You know, it would only take a couple hours to build a monitoring server. You could use a desktop system for this since you're only putting four people on in. Get to work a couple hours early, build the box, and solve your problem the right way. It's a lot easier to bring them to court with the kind of info you would get using this method. Just my $.02 Tom. -----Original Message----- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 10:39 PM To: Exchange Discussions Subject: RE: Monitoring email Hi, Thanks for the suggestion, but short of that, what could I do first thing tomorrow morning? What kind of logging is Exchange capable of? -----Original Message----- From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 8:40 PM To: Exchange Discussions Subject: RE: Monitoring email Journaling. It is probably best to build a "monitoring" server and enable journaling on that server. Move the mailboxes in question to that server. Take a look at Q239427 Tom. -----Original Message----- From: Brian Dugas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 7:14 PM To: Exchange Discussions Subject: Monitoring email I need to monitor emails for 4 people in the company. Both incoming and outgoing. We think they are giving out trade secrets. What is the best method for doing this? We are running Exchange 5.5 sp3 NT4.0 sp6 Brian _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]