Log, track, capture information of rogue technician opening mailbo

  • Thread starter VirtuallyNotHere
  • Start date Views 664
V

VirtuallyNotHere

Hello,
I have a rogue technician using a generic domain admin account opening
peoples mailboxes.

Is it possible to capture when this happens, track the source IP, and
basically anything proving this is happening? I know this comes up alot and
I had read something from microsoft on version 5.5 of exchange about this but
I haven't seen anyone doing it in a long time and we are sure it happens, I
just have to find out whos' mail and so forth.
I know I could reset the ad permissions or whatnot, but I rather just find
out if the mailboxes are in fact being opened and email is being read. I
also know there is some controversy on the net about how an event can be
triggered in exchange when someone views anothers calendar to schedule a
meeting or something, I want to be 30000 percent sure of which mailboxes are
being opened and messages read. Also, is there any hidden way of redirecting
email to someone elses mailbox aside from within the AD tools - forward mail
to? I know outlook rules but that is not happening.

thx!!!
 
K

Karl Mitschke

Hello VirtuallyNotHere,

> Hello,
> I have a rogue technician using a generic domain admin account opening
> peoples mailboxes.
> Is it possible to capture when this happens, track the source IP, and
> basically anything proving this is happening? I know this comes up
> alot and
> I had read something from microsoft on version 5.5 of exchange about
> this but
> I haven't seen anyone doing it in a long time and we are sure it
> happens, I
> just have to find out whos' mail and so forth.
> I know I could reset the ad permissions or whatnot, but I rather just
> find
> out if the mailboxes are in fact being opened and email is being read.
> I
> also know there is some controversy on the net about how an event can
> be
> triggered in exchange when someone views anothers calendar to schedule
> a
> meeting or something, I want to be 30000 percent sure of which
> mailboxes are
> being opened and messages read. Also, is there any hidden way of
> redirecting
> email to someone elses mailbox aside from within the AD tools -
> forward mail
> to? I know outlook rules but that is not happening.
> thx!!!
>


Kill the generic account's exchange poermissions.

Karl

 
Top