Spying on Clients   

I have an Exchange 2003 account, and use Outlook 2007 as my client.

I have discovered that there is sharing (hand under the folder) displayed on 
certain folders of my mailbox.

Checking the permissions, there is nothing abnormal ( Default = None, 
anonymous = none).

I have tried removing both, and created an entry for myself with Owner 
rights, but each time I edit and save these settings on any of the folders, 
the sharing (hand under the folder) returns.

It has always been my belief that a network admin has been spying on me, and 
this leaves me very curious and concerned.

Question 1 - Are Exchange Admin(s) able to set up access and rules that will 
monitor certain folders within certain mailboxes for "informational" reasons?

Question 2 - How can I, as a normal user, collect a reporting that will 
prove this?

I have heard that in previous versions of Office, the Journaling feature 
would allow you to track any and all access to files, folders, etc.   Is 
there something similar that will show me dates, times, accounts accessing a 
folder, etc.?

My understanding is that there is a log file on Exchange that shows all 
accounts logging into all mailboxes, which would show if an Admin account was 
logging into his/her bosses mailbox, etc.

I have looked into this where I work, and have been told that this logging 
is not enabled.  hmmm?

Any help would be greatly appreciated.

date: Sun, 17 Feb 2008 09:14:01 -0800   author:   DinoBravo

Re: Spying on Clients   

On Sun, 17 Feb 2008 09:14:01 -0800, DinoBravo
 wrote:

>I have an Exchange 2003 account, and use Outlook 2007 as my client.
>
>I have discovered that there is sharing (hand under the folder) displayed on 
>certain folders of my mailbox.
>
>Checking the permissions, there is nothing abnormal ( Default = None, 
>anonymous = none).
>
>I have tried removing both, and created an entry for myself with Owner 
>rights, but each time I edit and save these settings on any of the folders, 
>the sharing (hand under the folder) returns.
>
>It has always been my belief that a network admin has been spying on me, and 
>this leaves me very curious and concerned.

There a number of ways mailboxes can be monitored.
If you are that concerned you should talk to HR - though I suspect
your company policies allow for it.
Nothing you can really do about it otherwise if it is happening, other
than quit.
Are you doing something that may get you fired? 
If not, dont worry about it and keep your email professional.


>
>Question 1 - Are Exchange Admin(s) able to set up access and rules that will 
>monitor certain folders within certain mailboxes for "informational" reasons?
>
>Question 2 - How can I, as a normal user, collect a reporting that will 
>prove this?
>
>I have heard that in previous versions of Office, the Journaling feature 
>would allow you to track any and all access to files, folders, etc.   Is 
>there something similar that will show me dates, times, accounts accessing a 
>folder, etc.?
>
>My understanding is that there is a log file on Exchange that shows all 
>accounts logging into all mailboxes, which would show if an Admin account was 
>logging into his/her bosses mailbox, etc.
>
>I have looked into this where I work, and have been told that this logging 
>is not enabled.  hmmm?
>
>Any help would be greatly appreciated.

date: Sun, 17 Feb 2008 12:22:12 -0500   author:   Andy David {MVP}

Re: Spying on Clients   

Andy,

there is nothing that I am doing wrong, but I believe that the Network Admin 
is wrong, and want to be able to present something to this persons Director 
to support my claims.

Aren't there some standards/controls on supplying periodic reports to an 
Admins Manager/Director that can show who is accessing what?

I would think that if an admin knows that if such a report is being made 
available to their manager, they would think twice about going where they 
don't belong.


"Andy David  {MVP}" wrote:

> On Sun, 17 Feb 2008 09:14:01 -0800, DinoBravo
>  wrote:
> 
> >I have an Exchange 2003 account, and use Outlook 2007 as my client.
> >
> >I have discovered that there is sharing (hand under the folder) displayed on 
> >certain folders of my mailbox.
> >
> >Checking the permissions, there is nothing abnormal ( Default = None, 
> >anonymous = none).
> >
> >I have tried removing both, and created an entry for myself with Owner 
> >rights, but each time I edit and save these settings on any of the folders, 
> >the sharing (hand under the folder) returns.
> >
> >It has always been my belief that a network admin has been spying on me, and 
> >this leaves me very curious and concerned.
> 
> There a number of ways mailboxes can be monitored.
> If you are that concerned you should talk to HR - though I suspect
> your company policies allow for it.
> Nothing you can really do about it otherwise if it is happening, other
> than quit.
> Are you doing something that may get you fired? 
> If not, dont worry about it and keep your email professional.
> 
> 
> >
> >Question 1 - Are Exchange Admin(s) able to set up access and rules that will 
> >monitor certain folders within certain mailboxes for "informational" reasons?
> >
> >Question 2 - How can I, as a normal user, collect a reporting that will 
> >prove this?
> >
> >I have heard that in previous versions of Office, the Journaling feature 
> >would allow you to track any and all access to files, folders, etc.   Is 
> >there something similar that will show me dates, times, accounts accessing a 
> >folder, etc.?
> >
> >My understanding is that there is a log file on Exchange that shows all 
> >accounts logging into all mailboxes, which would show if an Admin account was 
> >logging into his/her bosses mailbox, etc.
> >
> >I have looked into this where I work, and have been told that this logging 
> >is not enabled.  hmmm?
> >
> >Any help would be greatly appreciated.
>

date: Sun, 17 Feb 2008 09:35:01 -0800   author:   DinoBravo

Re: Spying on Clients   

On Sun, 17 Feb 2008 09:35:01 -0800, DinoBravo
 wrote:

>Andy,
>
>there is nothing that I am doing wrong, but I believe that the Network Admin 
>is wrong, and want to be able to present something to this persons Director 
>to support my claims.

Why do you think he is spying on you? What makes you think that?


>
>Aren't there some standards/controls on supplying periodic reports to an 
>Admins Manager/Director that can show who is accessing what?

Event logs turned up can show mailbox access, but they also can lead
to a lot of false positives. 
You dont even need mailbox access to monitor however if message
journaling or 3rd pary software was being used.

>
>I would think that if an admin knows that if such a report is being made 
>available to their manager, they would think twice about going where they 
>don't belong.

If an end-user could easily prove that his mail is being monitored,
than it wouldnt make much sense to have that ability.

>
>
>"Andy David  {MVP}" wrote:
>
>> On Sun, 17 Feb 2008 09:14:01 -0800, DinoBravo
>>  wrote:
>> 
>> >I have an Exchange 2003 account, and use Outlook 2007 as my client.
>> >
>> >I have discovered that there is sharing (hand under the folder) displayed on 
>> >certain folders of my mailbox.
>> >
>> >Checking the permissions, there is nothing abnormal ( Default = None, 
>> >anonymous = none).
>> >
>> >I have tried removing both, and created an entry for myself with Owner 
>> >rights, but each time I edit and save these settings on any of the folders, 
>> >the sharing (hand under the folder) returns.
>> >
>> >It has always been my belief that a network admin has been spying on me, and 
>> >this leaves me very curious and concerned.
>> 
>> There a number of ways mailboxes can be monitored.
>> If you are that concerned you should talk to HR - though I suspect
>> your company policies allow for it.
>> Nothing you can really do about it otherwise if it is happening, other
>> than quit.
>> Are you doing something that may get you fired? 
>> If not, dont worry about it and keep your email professional.
>> 
>> 
>> >
>> >Question 1 - Are Exchange Admin(s) able to set up access and rules that will 
>> >monitor certain folders within certain mailboxes for "informational" reasons?
>> >
>> >Question 2 - How can I, as a normal user, collect a reporting that will 
>> >prove this?
>> >
>> >I have heard that in previous versions of Office, the Journaling feature 
>> >would allow you to track any and all access to files, folders, etc.   Is 
>> >there something similar that will show me dates, times, accounts accessing a 
>> >folder, etc.?
>> >
>> >My understanding is that there is a log file on Exchange that shows all 
>> >accounts logging into all mailboxes, which would show if an Admin account was 
>> >logging into his/her bosses mailbox, etc.
>> >
>> >I have looked into this where I work, and have been told that this logging 
>> >is not enabled.  hmmm?
>> >
>> >Any help would be greatly appreciated.
>>

date: Sun, 17 Feb 2008 13:10:20 -0500   author:   Andy David {MVP}

Re: Spying on Clients   

If the admin is monitoring your mailbox in the manner you suspect, then they 
need to be fired for incompetence.  As Andy points out, there are many ways 
(journaling, alternjate recipient, etc) to accomplish this that would not be 
detectable by the end user.



"Andy David {MVP}"  wrote in message 
news:tttgr3piv65sq49pmtpuokk31pqb8vig2q@4ax.com...
> On Sun, 17 Feb 2008 09:35:01 -0800, DinoBravo
>  wrote:
>
>>Andy,
>>
>>there is nothing that I am doing wrong, but I believe that the Network 
>>Admin
>>is wrong, and want to be able to present something to this persons 
>>Director
>>to support my claims.
>
> Why do you think he is spying on you? What makes you think that?
>
>
>>
>>Aren't there some standards/controls on supplying periodic reports to an
>>Admins Manager/Director that can show who is accessing what?
>
> Event logs turned up can show mailbox access, but they also can lead
> to a lot of false positives.
> You dont even need mailbox access to monitor however if message
> journaling or 3rd pary software was being used.
>
>>
>>I would think that if an admin knows that if such a report is being made
>>available to their manager, they would think twice about going where they
>>don't belong.
>
> If an end-user could easily prove that his mail is being monitored,
> than it wouldnt make much sense to have that ability.
>
>>
>>
>>"Andy David  {MVP}" wrote:
>>
>>> On Sun, 17 Feb 2008 09:14:01 -0800, DinoBravo
>>>  wrote:
>>>
>>> >I have an Exchange 2003 account, and use Outlook 2007 as my client.
>>> >
>>> >I have discovered that there is sharing (hand under the folder) 
>>> >displayed on
>>> >certain folders of my mailbox.
>>> >
>>> >Checking the permissions, there is nothing abnormal ( Default = None,
>>> >anonymous = none).
>>> >
>>> >I have tried removing both, and created an entry for myself with Owner
>>> >rights, but each time I edit and save these settings on any of the 
>>> >folders,
>>> >the sharing (hand under the folder) returns.
>>> >
>>> >It has always been my belief that a network admin has been spying on 
>>> >me, and
>>> >this leaves me very curious and concerned.
>>>
>>> There a number of ways mailboxes can be monitored.
>>> If you are that concerned you should talk to HR - though I suspect
>>> your company policies allow for it.
>>> Nothing you can really do about it otherwise if it is happening, other
>>> than quit.
>>> Are you doing something that may get you fired?
>>> If not, dont worry about it and keep your email professional.
>>>
>>>
>>> >
>>> >Question 1 - Are Exchange Admin(s) able to set up access and rules that 
>>> >will
>>> >monitor certain folders within certain mailboxes for "informational" 
>>> >reasons?
>>> >
>>> >Question 2 - How can I, as a normal user, collect a reporting that will
>>> >prove this?
>>> >
>>> >I have heard that in previous versions of Office, the Journaling 
>>> >feature
>>> >would allow you to track any and all access to files, folders, etc. 
>>> >Is
>>> >there something similar that will show me dates, times, accounts 
>>> >accessing a
>>> >folder, etc.?
>>> >
>>> >My understanding is that there is a log file on Exchange that shows all
>>> >accounts logging into all mailboxes, which would show if an Admin 
>>> >account was
>>> >logging into his/her bosses mailbox, etc.
>>> >
>>> >I have looked into this where I work, and have been told that this 
>>> >logging
>>> >is not enabled.  hmmm?
>>> >
>>> >Any help would be greatly appreciated.
>>>

date: Sun, 17 Feb 2008 12:48:59 -0800   author:   John Fullbright fjohn@donotspamnetappdotcom

Re: Spying on Clients   

In article , 
DinoBravo@discussions.microsoft.com says...
> I have an Exchange 2003 account, and use Outlook 2007 as my client.
> 
> I have discovered that there is sharing (hand under the folder) displayed on 
> certain folders of my mailbox.
> 
> Checking the permissions, there is nothing abnormal ( Default = None, 
> anonymous = none).
> 
> I have tried removing both, and created an entry for myself with Owner 
> rights, but each time I edit and save these settings on any of the folders, 
> the sharing (hand under the folder) returns.
> 
> It has always been my belief that a network admin has been spying on me, and 
> this leaves me very curious and concerned.
> 
> Question 1 - Are Exchange Admin(s) able to set up access and rules that will 
> monitor certain folders within certain mailboxes for "informational" reasons?
> 
> Question 2 - How can I, as a normal user, collect a reporting that will 
> prove this?
> 
> I have heard that in previous versions of Office, the Journaling feature 
> would allow you to track any and all access to files, folders, etc.   Is 
> there something similar that will show me dates, times, accounts accessing a 
> folder, etc.?
> 
> My understanding is that there is a log file on Exchange that shows all 
> accounts logging into all mailboxes, which would show if an Admin account was 
> logging into his/her bosses mailbox, etc.
> 
> I have looked into this where I work, and have been told that this logging 
> is not enabled.  hmmm?
> 
> Any help would be greatly appreciated.


In the United States of America all data belongs to the company no 
matter how you feel about it. They have a right to protect their network 
and resources and monitor any form of communication on their phones and 
networks, you have no expectation of privacy.

As to email, it's easy to allow anyone to monitor all email boxes, and 
you should assume that it's always being done.

-- 

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a 
  drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

date: Sun, 17 Feb 2008 18:10:27 -0500   author:   Leythos