We have an issue on our site where a system admin, who has access to all company mail files, has been reading the emails of management after he changed the config in the ACL. This was uncovered during a check of the server logs where we saw the system admins username opening/reading documents regularly on mailfiles which wernt his. Obviously this will probably lead to dismissal, but ive been asked by management if there is anyway to tell specifically what emails he read. I cant seem to find anything in the logs. The best I can do is be able to see that 12 items have been read in a specific mail file between say 10 and 11.
Does notes keep specific data so we can find out what those 12 items were? Or are there any 3rd party tools?
Subject: RE: *With any luck, he won’t have thought of it.
he did.
which is ironic seeing as he didnt think to try and erase entries in the server notes log, or just to use a backup of the users ID to read their mail undetected.
Subject: RE: *With any luck, he won’t have thought of it.
The read/unread is more obvious to users…
This was recently discussed in this thread. If this admin doesn’t know that you know of his actions, you could look at enabling something like I mentioned in that thread.