Classification: UNCLASSIFIED Caveats: NONE I would make sure that you have management's approval or your company lawyer's approval. You can't legally view all of someone's email without reasonable cause, even if it is on company owned equipment. Even then your search/viewing must be limited to whatever search criteria you are looking for.
From: Richard Stovall [mailto:rich...@gmail.com] Sent: Friday, July 23, 2010 9:21 AM To: MS-Exchange Admin Issues Subject: Re: Recovering messages from Exchange server 2007 Do you have any sort of edge device or a similar service? I often recover messages for users from our Barracuda. (We also relay outbound messages through it to take advantage of the invalid bounce suppression feature.) On Fri, Jul 23, 2010 at 9:14 AM, John Bowles <john.bow...@wlkmmas.org> wrote: You can track messages, but you cannot view the contents of the message. That's if you have message tracking already enabled prior to these messages having been sent/received. John Bowles ________________________________ From: James Rankin [kz2...@googlemail.com] Sent: Friday, July 23, 2010 8:36 AM To: MS-Exchange Admin Issues Subject: Re: Recovering messages from Exchange server 2007 Is anything usable in the message tracking tool? On 23 July 2010 13:25, John Bowles <john.bow...@wlkmmas.org> wrote: Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles ________________________________ From: James Rankin [kz2...@googlemail.com] Sent: Friday, July 23, 2010 7:59 AM To: MS-Exchange Admin Issues Subject: Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." Classification: UNCLASSIFIED Caveats: NONE
