How to track IP of email sender using MAPI

  • Thread starter Hasan-Exchanger
  • Start date Views 5,109
H

Hasan-Exchanger

#1
Hello,
How can i view IP of the internal client who is sending email to others. The client is using MAPI and all i am getting through message tracking is IP of my CAS.
For example User A sends email to User B by using outlook client with MAPI configured. I want to know IP of User A.

I also want to know how i can view message header in OWA 2007.
 
H

Hasan-Exchanger

#3
Hi,

You can get these details from IIS logs of CAS server : C:\WINDOWS\system32\LogFiles\W3SVC1, you can also try log-parser to Analise these logs have a look into this article : http://msexchangeteam.com/archive/2007/11/12/447515.aspx
Ripu Daman Mina | MCSE 2003 & MCSA Messaging
Hi,
No i am not getting the IP of client on that particular time. If a user tried to emal using outlook it is not showing IP of the originating email. I have checked with timestamp.................

Also i want to give Message header facility to users, like we can view message header in hotmail by right clicking on email...........
 
A

Allen Song

#4
Hi,

It is not possible to track the client IP if the messages are submitted by MAPI clients.

Thanks

Allen
 
H

Hasan-Exchanger

#5
Hi,

It is not possible to track the client IP if the messages are submitted by MAPI clients.

Thanks

Allen
Allen,

Thanks Allen.

But Even not from OWA? Like if local client is using OWA to send email from inside network can i trace it? or not. I know i can trace the IP of external client from IIS logs who is using OWA outside network.
 
A

Allen Song

#6
Hi,

Yes, it's also not possible in OWA in Message Tracking log. You can track the OWA by using IIS log.

Thanks

Allen
 
H

Hasan-Exchanger

#7
Hi,

Yes, it's also not possible in OWA in Message Tracking log. You can track the OWA by using IIS log.

Thanks

Allen
Then how to trace IP of client who is sending email from within my organisation. Let say an email address is shared by 3 persons, they are allowed SEND AS permission on that email address. Someone from 3 misuse this email address so i want to trace IP of that sender who misuse email address. MAPI is used.
 
R

Ripu Daman

#10
Hi,

Kindly download the latest version for exchange 2007 http://www.microsoft.com/downloads/details.aspx?displayFamilyID=9a49c22e-e0c7-4b7c-acef-729d48af7bc9

The updated documentation can be found here:http://go.microsoft.com/fwlink/?LinkId=142433.
& also you will need to install the Visual C++ 2008 SP1 Redistributable to get this version working. You can get this fromhttp://www.microsoft.com/downloads/details.aspx?familyid=A5C84275-3B97-4AB7-A40D-3802B2AF5FC2&displaylang=en.

Ripu Daman Mina | MCSE 2003 & MCSA Messaging
 
H

Hasan-Exchanger

#11
Hi,

Kindly download the latest version for exchange 2007 http://www.microsoft.com/downloads/details.aspx?displayFamilyID=9a49c22e-e0c7-4b7c-acef-729d48af7bc9

The updated documentation can be found here:http://go.microsoft.com/fwlink/?LinkId=142433.
& also you will need to install the Visual C++ 2008 SP1 Redistributable to get this version working. You can get this fromhttp://www.microsoft.com/downloads/details.aspx?familyid=A5C84275-3B97-4AB7-A40D-3802B2AF5FC2&displaylang=en.
Ripu Daman Mina | MCSE 2003 & MCSA Messaging
Hi Ripu,
Ok its working, but i cann't see the mail subject? is there any possibility to see the mail subject.

Also if i want to continously monitor it through system monitor, it will put burden on my server performance, right? so what should i do if i get complaint that ABC user has misused our email system 2 days before and i have to trace from which IP he did so.
 
H

Hasan-Exchanger

#13
Hi,

The communication is RPC, it's not possible to see the message header.

Thanks

Allen
Hi Allen,

No i mean when i open email in OWA from someone let say from hotmail, i am unable to see message header option in that email. I can see message header in outlook, but not in owa........
 
A

Anil K Singh

#14
You can not see message header in OWA, only you can see message header in outlook client as Allen said above.

Anil
 
H

Hasan-Exchanger

#15
You can not see message header in OWA, only you can see message header in outlook client as Allen said above.
Anil
But why not :( i want to give this functionality to my users. Other web-enable servers has header facility like mail enable.........why exchange is not offering so??? isn't there any work around by other mean to enable it???
 
H

Hasan-Exchanger

#18
Oh i forgot other part of my question i.e.

How can i view IP of the internal client who is sending email to others. The client is using MAPI and all i am getting through message tracking is IP of my CAS.
For example User A sends email to User B by using outlook client with MAPI configured. I want to know IP of User A.
 
A

Allen Song

#19
Hi,

There is no integrated Exchange tool can get the IP address for the MAPI clients. You can only use Network Monitor to capture the data.

Thanks

Allen
 
H

Hasan-Exchanger

#20
Hi,

There is no integrated Exchange tool can get the IP address for the MAPI clients. You can only use Network Monitor to capture the data.

Thanks

Allen
So do i need to turn on my system monitor or network montor 24 hours to monitor IP?? and definitely it will increase load on server.....?????
 
Top