Need to monitor employee mail

[rizrizza]

We have an employee that has been suspected of stealing student information from our SIS and will potentially need charges pressed against them for it and I was asked to monitor the mail from their account on our exchange server by the CEO without their knowledge. I am not sure how to do this. I can give myself permission to their mailbox but do not know how to view the messages in their mailbox. I am new to exchange and need help figuring this out.

Thanks in advance!!!

Trying to do alot with what little I know. Thank you

 

[xmsre]

Journaling is your best option for monitoring incoming/outgoing mail.

If you want to monitor logons/logoffs, then see

http://www.msexchange.org/tutorials...ess-Exchange-System-Manager-Event-Viewer.html

 

[58sniper]

And take a .pst dump of their mailbox.

Pat Richard MVP

 

[xmsre]

One time pont in time, a pst dump could work. Ongoing, you'd be better off with journaling. I'm certainly not a lawyer, but I'd be willing to bet journaling would stand up in court.

 

[rizrizza]

I enabled a journaling account on our server and its working, that should be enough. Thanks for the help.

Trying to do alot with what little I know. Thank you

 

[wahnula]

If you're REALLY inquisitive, there's a free keylogger program called KGBSpy, it records every keystroke and hides itself well. This will work if the employee is using external services such as Yahoo! and others. I used this to get proof that an employee was setting up drug deals over IM.

Oh, and be sure to remove it immediately after you get what you need. Some A/Vs will flag it for what it is, a keylogger.

Tony

Users helping Users...

 

[Davetoo]

The .PST dump would be useful if the user suspects they're being monitored and start deleting their emails. The journaling is useful for this point forward...the PST for a history of what was already sent/received and not deleted.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!