Announcement

Collapse
No announcement yet.

Copying a user on another users email in and out..

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Copying a user on another users email in and out..

    We have the need to play "big brother" with some of our users.

    UserA needs to see ALL email sent and Received by UserB, without the knowledge of UserB.

    They would like to do it without having him open another mailbox to monitor, so a copy option would be best.

    We use GFI mail essentials, but that only captures things going in/out of the domain, not locally routed email.


    I tried searching the forum but couldn't find an answer.

  • #2
    Re: Copying a user on another users email in and out..

    Before implementing anything like this, ensure that this is legal in your country, and also that it is allowed by company policy.
    Gareth Howells

    BSc (Hons), MBCS, MCP, MCDST, ICCE

    Any advice is given in good faith and without warranty.

    Please give reputation points if somebody has helped you.

    "For by now I could have stretched out my hand and struck you and your people with a plague that would have wiped you off the Earth." (Exodus 9:15) - I could kill you with my thumb.

    "Everything that lives and moves will be food for you." (Genesis 9:3) - For every animal you don't eat, I'm going to eat three.

    Comment


    • #3
      Re: Copying a user on another users email in and out..

      An Exchange Administrator can open a user's mailbox while the user also has it open - without the user knowing. However, without the mailbox user's permission in writing you may be on VERY sticky ground in the UK - ESPECIALLY if your company recognise a Union. (The rest of this post assumes a situation in the UK).

      Your IT Usage Policies MUST be worded VERY carefully and MUST state that the user accepts that the corporate email system, the mailbox, and all internally routed content thereof belongs to the company, NOT to the sender or recipient. If you want to also include externally routed content, your IT policy must also forbid the use of email for anything but corporate purposes. If covert monitoring is to be used this must be mentioned in the policy.

      Further, it must state that by continuing to work for this employer you are strongly implying your acceptance of the terms of the IT usage policy and that this tacit acceptance will be brought to the attention of any relevant official body or convened tribunal.

      If any of these things are missing from the policy then the employee is well protected and may well be able to successfully litigate against the company; or if you dismiss an employee over an email matter he may be protected under unfair dismissal laws, unlawful surveillance laws and various other snarly, tangly bits of legislation. Make sure your company has taken specialist advice from a Law professional who has expertise in information technology and employment law... you may be laying a minefield for your own men!!


      Tom
      For my own and your protection, I do not provide support by private message under any circumstances. All such messages will be deleted and ignored.

      Anything you say will be misquoted and used against you

      Comment


      • #4
        Re: Copying a user on another users email in and out..

        Originally posted by gforceindustries View Post
        Before implementing anything like this, ensure that this is legal in your country, and also that it is allowed by company policy.
        No legal problems, and HR is asking for it.


        Thanks.

        Comment


        • #5
          Re: Copying a user on another users email in and out..

          Look at message journalling, then a couple of rules to discard messages from other users
          Tom Jones
          MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
          PhD, MSc, FIAP, MIITT
          IT Trainer / Consultant
          Ossian Ltd
          Scotland

          ** Remember to give credit where credit is due and leave reputation points where appropriate **

          Comment


          • #6
            Re: Copying a user on another users email in and out..

            Originally posted by Stonelaughter View Post
            An Exchange Administrator can open a user's mailbox while the user also has it open - without the user knowing. However, without the mailbox user's permission in writing you may be on VERY sticky ground in the UK - ESPECIALLY if your company recognise a Union. (The rest of this post assumes a situation in the UK).

            Your IT Usage Policies MUST be worded VERY carefully and MUST state that the user accepts that the corporate email system, the mailbox, and all internally routed content thereof belongs to the company, NOT to the sender or recipient. If you want to also include externally routed content, your IT policy must also forbid the use of email for anything but corporate purposes. If covert monitoring is to be used this must be mentioned in the policy.

            Further, it must state that by continuing to work for this employer you are strongly implying your acceptance of the terms of the IT usage policy and that this tacit acceptance will be brought to the attention of any relevant official body or convened tribunal.

            If any of these things are missing from the policy then the employee is well protected and may well be able to successfully litigate against the company; or if you dismiss an employee over an email matter he may be protected under unfair dismissal laws, unlawful surveillance laws and various other snarly, tangly bits of legislation. Make sure your company has taken specialist advice from a Law professional who has expertise in information technology and employment law... you may be laying a minefield for your own men!!
            We are in the US.

            I can access the mail no problem, just wonderding what options there are for basically BCC'in someone on everything someone sends/receives without accessing the mailbox directly.

            Comment


            • #7
              Re: Copying a user on another users email in and out..

              Natively, on a selective basis using Exchange 2003, it isn't possible.
              Journaling is a per mailbox store basis.
              If you are using Enterprise edition and have a spare mailbox store then you could move the mailbox across so that it can be journaled.

              Using third party tools, there is selective journaling from ivasoft.biz.

              I would suggest that you journal to a separate mailbox and then that mailbox is not opened online. Use an exmerge to pull the mailbox out to a PST file and then open that in an offline Outlook (ie not configured with Exchange). If the original user has configured read receipts then they will get a read receipt from the person/account the message was read by, and will know their email is being read.

              Simon.
              --
              Simon Butler
              Exchange MVP

              Blog: http://blog.sembee.co.uk/
              More Exchange Content: http://exchange.sembee.info/
              Exchange Resources List: http://exbpa.com/
              In the UK? Hire me: http://www.sembee.co.uk/

              Sembee is a registered trademark, used here with permission.

              Comment

              Working...
              X