Email snooping

[Kiriray]

If my Outlook mailbox in Exchange server is configured to send a copy of my emails to me and another person, will that person be able to see also what I am doing with all of my mail activities (i.e. sending, receiving, permanently deleting...)?

Thanks for all the help.

 

[nephets]

Yes, if the copy is to a server the administrator for that server would have access to you sent/received emails...be careful...remember also that many companies have a "wall" before your email gets onto their network, they might check for .exe's zip file .jpeg or swear words, you can get around swearwords by putting "." between the letters. I hope this answers your question, now think about your internet access, if you access the net through a server, the server will keep a log of a sites viewed, this will include your machine name a dates and times!!! BIG BROTHER

 

[uriel717]

Actually, if the Exchange Server is just set-up to send a copy of messages that reach your account to another recipient, then all that person will see is the incoming mail. They will NOT have access to any mail you are sending (unless you copy yourself on that mail), nor will they be able to see any of your other Outlook resources. An Exchange Administrator would have to jump through quite a few hoops to get access to your mail in the server unless he/she had your NT password. While the NT Admin can change your account password and gain access to your mail easily, he/she would be unable to change it back if they didn't know it was originally. You would then know that someone had changed your password and has possibly been snooping around.

 

[Empeethree]

"An Exchange Administrator would have to jump through quite a few hoops to get access to your mail in the server unless he/she had your NT password"

Not really, Just log in as Admin and you can see anything the user can see. (or at least that is the way it is here)



Rob

 

[uriel717]

Each Exchange mailbox is tied to a particular NT user account. Only that account can fully access that mailbox. The user on that account can grant limited rights to other user accounts to access part or all of that mailbox, but no one else can. True the administrator account can change passwords, etc. but if the administrator set his Outlook settings to access a different user's mailbox, he/she would be denied. A user with the right priviledges can use the Exchange Administrator utility to view what accounts are tied to what Exchange mailboxes, check the size of the boxes, etc. but they cannot peek into those boxes at the messages contained within.

I suppose a user with the proper rights could log in, use the Exchange Administrator utility to change the NT user account for a mailbox to the administrator account, setup Outlook to read that mailbox and have full access to it. When finished they could just change the mailbox back to its original owner. That would be subtle enough to go unnoticed unless the use tried to access the mailboxes during that time.

 

[steviebab]

An exchange admin can grant himself/herself permissions to access any mailbox with very little difficulty at all. E-mails sent on a company system are not your property, they belong to the company!

 

[dselga]

i agree with steviebab...an admin can get into any mailbox they want with little or no effort...

 

[Kelanen]

Any admin can access anyone's mail/calendar/sent items/etc, and you don't even need to be at the server to do it.

Log into a terminal as an administrator, go into Outlook and then Tools->Services->Properties->Advanced->Add Mailbox and then just add any mailboxes that you want to view.

I wouldn't advocate snooping for the sake of it, but a company does have a right of access to your mailbox if it deems it necessary. Jonathan Challis
IT Manager