Tracking a User who used the Send As for a Dist Group

[peterlyttle]

Hello,

Does anyone know how it is possible to find out which user (who had "Send As" permissions on a distribution group) sent an email the a specific person? The only thing I could think of was to search everyones Sent Items around the time in question.

Cheers,
Peter

 

[58sniper]

That's assuming the sender didn't hard delete it.

What do the message headers say? Do they give an IP address of the client?

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[peterlyttle]

Nope unfortunatly there is no client IP in the headers. This is a setting where you can increase the diagnostic logging level of Send As.