Announcement

Collapse
No announcement yet.

Sending User Info

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Sending User Info

    Hello,

    We are running Exchange 2003 on a Win2003 server.

    We had an issue come up where I have been asked if it is possible to identify the IP address or computer name of the system in which an e-mail was sent from (internally). Since it is an internal e-mail there is no information in the "internet header" section of the e-mail. Is there a way to get this information or turn on the ability for future situations?

    Thanks!

  • #2
    Re: Sending User Info

    Originally posted by TheJax View Post
    Hello,

    We are running Exchange 2003 on a Win2003 server.

    We had an issue come up where I have been asked if it is possible to identify the IP address or computer name of the system in which an e-mail was sent from (internally). Since it is an internal e-mail there is no information in the "internet header" section of the e-mail. Is there a way to get this information or turn on the ability for future situations?

    Thanks!
    If you know the user account that was used to sent the email, you could look at authentication logs on a DC to see a computer the user logged in as. Hopefully, 'Audit Account Logons' of success has been set in the audit settings.

    Comment


    • #3
      Re: Sending User Info

      Not easily. It is almost impossible as that information simply isn't stored anywhere.
      Exchange doesn't log it. Exmon can show some of the information, but exmon isn't designed to be run constantly.

      Simon.
      --
      Simon Butler
      Exchange MVP

      Blog: http://blog.sembee.co.uk/
      More Exchange Content: http://exchange.sembee.info/
      Exchange Resources List: http://exbpa.com/
      In the UK? Hire me: http://www.sembee.co.uk/

      Sembee is a registered trademark, used here with permission.

      Comment


      • #4
        Re: Sending User Info

        Thank you both for the info!

        Comment


        • #5
          Re: Sending User Info

          http://exchangepedia.com/blog/2007/0...ddress-in.html

          Ta
          Caesar's cipher - 3

          ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

          SFX JNRS FC U6 MNGR

          Comment

          Working...
          X