Spying on Clients

DinoBravo · Joined: 17 Feb 2008 Posts: 5

I have an Exchange 2003 account, and use Outlook 2007 as my client.

I have discovered that there is sharing (hand under the folder) displayed on
certain folders of my mailbox.

Checking the permissions, there is nothing abnormal ( Default = None,
anonymous = none).

I have tried removing both, and created an entry for myself with Owner
rights, but each time I edit and save these settings on any of the folders,
the sharing (hand under the folder) returns.

It has always been my belief that a network admin has been spying on me, and
this leaves me very curious and concerned.

Question 1 - Are Exchange Admin(s) able to set up access and rules that will
monitor certain folders within certain mailboxes for "informational" reasons?

Question 2 - How can I, as a normal user, collect a reporting that will
prove this?

I have heard that in previous versions of Office, the Journaling feature
would allow you to track any and all access to files, folders, etc. Is
there something similar that will show me dates, times, accounts accessing a
folder, etc.?

My understanding is that there is a log file on Exchange that shows all
accounts logging into all mailboxes, which would show if an Admin account was
logging into his/her bosses mailbox, etc.

I have looked into this where I work, and have been told that this logging
is not enabled. hmmm?

Any help would be greatly appreciated.

Archived from group: microsoft>public>exchange>clients

Andy David {MVP} · Joined: 05 Aug 2007 Posts: 591

On Sun, 17 Feb 2008 09:14:01 -0800, DinoBravo
wrote:

>I have an Exchange 2003 account, and use Outlook 2007 as my client.
>
>I have discovered that there is sharing (hand under the folder) displayed on
>certain folders of my mailbox.
>
>Checking the permissions, there is nothing abnormal ( Default = None,
>anonymous = none).
>
>I have tried removing both, and created an entry for myself with Owner
>rights, but each time I edit and save these settings on any of the folders,
>the sharing (hand under the folder) returns.
>
>It has always been my belief that a network admin has been spying on me, and
>this leaves me very curious and concerned.

There a number of ways mailboxes can be monitored.
If you are that concerned you should talk to HR - though I suspect
your company policies allow for it.
Nothing you can really do about it otherwise if it is happening, other
than quit.
Are you doing something that may get you fired?
If not, dont worry about it and keep your email professional.

>
>Question 1 - Are Exchange Admin(s) able to set up access and rules that will
>monitor certain folders within certain mailboxes for "informational" reasons?
>
>Question 2 - How can I, as a normal user, collect a reporting that will
>prove this?
>
>I have heard that in previous versions of Office, the Journaling feature
>would allow you to track any and all access to files, folders, etc. Is
>there something similar that will show me dates, times, accounts accessing a
>folder, etc.?
>
>My understanding is that there is a log file on Exchange that shows all
>accounts logging into all mailboxes, which would show if an Admin account was
>logging into his/her bosses mailbox, etc.
>
>I have looked into this where I work, and have been told that this logging
>is not enabled. hmmm?
>
>Any help would be greatly appreciated.

DinoBravo · Joined: 17 Feb 2008 Posts: 5

Andy,

there is nothing that I am doing wrong, but I believe that the Network Admin
is wrong, and want to be able to present something to this persons Director
to support my claims.

Aren't there some standards/controls on supplying periodic reports to an
Admins Manager/Director that can show who is accessing what?

I would think that if an admin knows that if such a report is being made
available to their manager, they would think twice about going where they
don't belong.

"Andy David {MVP}" wrote:

> On Sun, 17 Feb 2008 09:14:01 -0800, DinoBravo
> wrote:
>
> >I have an Exchange 2003 account, and use Outlook 2007 as my client.
> >
> >I have discovered that there is sharing (hand under the folder) displayed on
> >certain folders of my mailbox.
> >
> >Checking the permissions, there is nothing abnormal ( Default = None,
> >anonymous = none).
> >
> >I have tried removing both, and created an entry for myself with Owner
> >rights, but each time I edit and save these settings on any of the folders,
> >the sharing (hand under the folder) returns.
> >
> >It has always been my belief that a network admin has been spying on me, and
> >this leaves me very curious and concerned.
>
> There a number of ways mailboxes can be monitored.
> If you are that concerned you should talk to HR - though I suspect
> your company policies allow for it.
> Nothing you can really do about it otherwise if it is happening, other
> than quit.
> Are you doing something that may get you fired?
> If not, dont worry about it and keep your email professional.
>
>
> >
> >Question 1 - Are Exchange Admin(s) able to set up access and rules that will
> >monitor certain folders within certain mailboxes for "informational" reasons?
> >
> >Question 2 - How can I, as a normal user, collect a reporting that will
> >prove this?
> >
> >I have heard that in previous versions of Office, the Journaling feature
> >would allow you to track any and all access to files, folders, etc. Is
> >there something similar that will show me dates, times, accounts accessing a
> >folder, etc.?
> >
> >My understanding is that there is a log file on Exchange that shows all
> >accounts logging into all mailboxes, which would show if an Admin account was
> >logging into his/her bosses mailbox, etc.
> >
> >I have looked into this where I work, and have been told that this logging
> >is not enabled. hmmm?
> >
> >Any help would be greatly appreciated.
>

Andy David {MVP} · Joined: 05 Aug 2007 Posts: 591

On Sun, 17 Feb 2008 09:35:01 -0800, DinoBravo
wrote:

>Andy,
>
>there is nothing that I am doing wrong, but I believe that the Network Admin
>is wrong, and want to be able to present something to this persons Director
>to support my claims.

Why do you think he is spying on you? What makes you think that?

>
>Aren't there some standards/controls on supplying periodic reports to an
>Admins Manager/Director that can show who is accessing what?

Event logs turned up can show mailbox access, but they also can lead
to a lot of false positives.
You dont even need mailbox access to monitor however if message
journaling or 3rd pary software was being used.

>
>I would think that if an admin knows that if such a report is being made
>available to their manager, they would think twice about going where they
>don't belong.

If an end-user could easily prove that his mail is being monitored,
than it wouldnt make much sense to have that ability.

>
>
>"Andy David {MVP}" wrote:
>
>> On Sun, 17 Feb 2008 09:14:01 -0800, DinoBravo
>> wrote:
>>
>> >I have an Exchange 2003 account, and use Outlook 2007 as my client.
>> >
>> >I have discovered that there is sharing (hand under the folder) displayed on
>> >certain folders of my mailbox.
>> >
>> >Checking the permissions, there is nothing abnormal ( Default = None,
>> >anonymous = none).
>> >
>> >I have tried removing both, and created an entry for myself with Owner
>> >rights, but each time I edit and save these settings on any of the folders,
>> >the sharing (hand under the folder) returns.
>> >
>> >It has always been my belief that a network admin has been spying on me, and
>> >this leaves me very curious and concerned.
>>
>> There a number of ways mailboxes can be monitored.
>> If you are that concerned you should talk to HR - though I suspect
>> your company policies allow for it.
>> Nothing you can really do about it otherwise if it is happening, other
>> than quit.
>> Are you doing something that may get you fired?
>> If not, dont worry about it and keep your email professional.
>>
>>
>> >
>> >Question 1 - Are Exchange Admin(s) able to set up access and rules that will
>> >monitor certain folders within certain mailboxes for "informational" reasons?
>> >
>> >Question 2 - How can I, as a normal user, collect a reporting that will
>> >prove this?
>> >
>> >I have heard that in previous versions of Office, the Journaling feature
>> >would allow you to track any and all access to files, folders, etc. Is
>> >there something similar that will show me dates, times, accounts accessing a
>> >folder, etc.?
>> >
>> >My understanding is that there is a log file on Exchange that shows all
>> >accounts logging into all mailboxes, which would show if an Admin account was
>> >logging into his/her bosses mailbox, etc.
>> >
>> >I have looked into this where I work, and have been told that this logging
>> >is not enabled. hmmm?
>> >
>> >Any help would be greatly appreciated.
>>

John Fullbright · Joined: 05 Aug 2007 Posts: 365

If the admin is monitoring your mailbox in the manner you suspect, then they
need to be fired for incompetence. As Andy points out, there are many ways
(journaling, alternjate recipient, etc) to accomplish this that would not be
detectable by the end user.

"Andy David {MVP}" wrote in message @4ax.com...
> On Sun, 17 Feb 2008 09:35:01 -0800, DinoBravo
> wrote:
>
>>Andy,
>>
>>there is nothing that I am doing wrong, but I believe that the Network
>>Admin
>>is wrong, and want to be able to present something to this persons
>>Director
>>to support my claims.
>
> Why do you think he is spying on you? What makes you think that?
>
>
>>
>>Aren't there some standards/controls on supplying periodic reports to an
>>Admins Manager/Director that can show who is accessing what?
>
> Event logs turned up can show mailbox access, but they also can lead
> to a lot of false positives.
> You dont even need mailbox access to monitor however if message
> journaling or 3rd pary software was being used.
>
>>
>>I would think that if an admin knows that if such a report is being made
>>available to their manager, they would think twice about going where they
>>don't belong.
>
> If an end-user could easily prove that his mail is being monitored,
> than it wouldnt make much sense to have that ability.
>
>>
>>
>>"Andy David {MVP}" wrote:
>>
>>> On Sun, 17 Feb 2008 09:14:01 -0800, DinoBravo
>>> wrote:
>>>
>>> >I have an Exchange 2003 account, and use Outlook 2007 as my client.
>>> >
>>> >I have discovered that there is sharing (hand under the folder)
>>> >displayed on
>>> >certain folders of my mailbox.
>>> >
>>> >Checking the permissions, there is nothing abnormal ( Default = None,
>>> >anonymous = none).
>>> >
>>> >I have tried removing both, and created an entry for myself with Owner
>>> >rights, but each time I edit and save these settings on any of the
>>> >folders,
>>> >the sharing (hand under the folder) returns.
>>> >
>>> >It has always been my belief that a network admin has been spying on
>>> >me, and
>>> >this leaves me very curious and concerned.
>>>
>>> There a number of ways mailboxes can be monitored.
>>> If you are that concerned you should talk to HR - though I suspect
>>> your company policies allow for it.
>>> Nothing you can really do about it otherwise if it is happening, other
>>> than quit.
>>> Are you doing something that may get you fired?
>>> If not, dont worry about it and keep your email professional.
>>>
>>>
>>> >
>>> >Question 1 - Are Exchange Admin(s) able to set up access and rules that
>>> >will
>>> >monitor certain folders within certain mailboxes for "informational"
>>> >reasons?
>>> >
>>> >Question 2 - How can I, as a normal user, collect a reporting that will
>>> >prove this?
>>> >
>>> >I have heard that in previous versions of Office, the Journaling
>>> >feature
>>> >would allow you to track any and all access to files, folders, etc.
>>> >Is
>>> >there something similar that will show me dates, times, accounts
>>> >accessing a
>>> >folder, etc.?
>>> >
>>> >My understanding is that there is a log file on Exchange that shows all
>>> >accounts logging into all mailboxes, which would show if an Admin
>>> >account was
>>> >logging into his/her bosses mailbox, etc.
>>> >
>>> >I have looked into this where I work, and have been told that this
>>> >logging
>>> >is not enabled. hmmm?
>>> >
>>> >Any help would be greatly appreciated.
>>>

OWA 2003 clients cannot login on some PCs. Many of my clients cannot login to OWA from one pc but can from another. when they cannot login, the username and password box continue to pop up, makeing them think it is a bad username or password.

How can I change the new message template for all clients? All, I am trying to edit the default new message template network wide. I know how to change the template on each machine, but I am really trying to avoid having to do that. Also, I have some users running outlook 2000, and some running 2002. All I nee

Outlook Clients Unable to use their credentials to login Hello, I dont know if anyone else expenerces this or not, but the other day we were unable to login to our exchange server. using all the correct credentials - all services and licencing active and working... Keeps prompting for username password.. afte

Win98 clients with Outlook 2000 cant send Greetings I have a customer with a Win2K SBS running Exchange 2K. All has been running sweetly for a month or two. However, this morning, when the client machines running Win98SE and using Outlook 2000 attempt to send, the following message appears. "The

RPC over HTTPs for *all* clients? Hello, We have an Exchange 2003 We want to enforce a requirement that all clients communicate using an encrypted protocol. On Exchange 2003 I don't think there is a way to 'enforce' this without installing ISA in front,