I want to be able to track if people are looking at things they shouldn’t in other peoples mail files.
Users are setting up mail delegation for when they are out of office. Managers have to give access to people in there team, but want to be able to see if a user has looked at something they shouldn’t have.
User detail shows who and when, but not what. Is there any way to find out what they’ve been looking at?
Thanks
Ross
Subject: Great user detail, but which docs
There are a lot of “why are you doing that” questions to be asked here, but I’ll assume that the requirements are rather fixed.
I don’t think that information is recorded on a document level. You’d have to throw some code into the forms which would record document reads in a separate log somewhere. That’s not a pretty solution, but it’s not a pretty situation to begin with. The mailbox template isn’t really put together with much internal security in mind, so you’ll have make changes in the template which you’ll have to redo after every upgrade. I’d strongly recommend that people in your organization start using encryption as appropriate so that only intended recipients can read sensitive messages even if other people have access to their mailboxes.
Subject: RE: Great user detail, but which docs
Its not all that complex --It does require code changes, but nothing major:
Add a new field on the form, and then add a QueryOpen event that writes the current username into that field.
You can get fancier, adding messages/warnings, checking to see if the username matches the recipient, etc. But I’d start with just the field, and let managers know to check that field on sensitive documents if they are concerned.
Frankly, though, you will never have a 100% effective solution – Any admin can make a copy of the DB, and read to thier hearts content. Anyone with Reader access can do that. Or they can right-click and read an email via the document properties.