Is the old person accessing them via OWA? Are the being real or are rules running that forward copies to somewhere else?
ellery -----Original Message----- From: Jason Dwyer [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 9:15 PM To: MS-Exchange Admin Issues Subject: RE: Help Security Breach! The way I can tell they are being read is that I have given another employee access to the mailbox and he has watched as emails turn from unread to read. I have looked at the event log but it doesn't seem to have much in it... i assume that is because I haven't enabled much in the way of logging. Jason -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Thursday, 1 November 2001 12:49 PM To: MS-Exchange Admin Issues Subject: RE: Help Security Breach! How do you know they are being read? If they are, are there any other employees who have admin access. Have you checked the event log on the Exch server? -----Original Message----- From: Jason Dwyer [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:45 PM To: MS-Exchange Admin Issues Subject: Help Security Breach! Hi guys, Scenario NT4 ps6a exchange 5.5 sp4 netgear FR314 firewall with only ports 25 and 80 open. Just seem to be having a security issue. email appears to be being read from a users account who is no longer an employee. I have disable his account, taking him out of the OWA users group. i am pretty new to exchange so don't know much about logs etc.. can anyone offer any assistance. Thanks in advance. Jason Dwyer List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
