hi Greg and thank you for your response and for the info. I agree with you but the senario is like the following : the user left the company, he was accessing his mailbox from the server, he also used PST to download all messages from the server but that is not important now I think as his machine was formated after he left, then he was asked about some information he should have submitted before he left the company, he claimed he did by a sent email, from the server the email I got from his mailbox doesn't include the info he insisted it was in his email, and he brought a copy of that in question old date sent email with full information including the bit missing in the copy we got for his mailbox at the server, he is accusing one of the admins he had an argument with before he left, the admin denies making any changes, we are not sure who is saying what and want to verify if this is possible to be done by an admin? and howo it could be traced, bare in mind our Exchange server 5.5 is not connected to the network no more as we are using Exchange 2003 instead Please advise "Lara, Greg" <GLara@xxxxxxx> wrote: http://www.MSExchange.org/ Hazim, keep in mind that with Exchange and Outlook in MAPI client mode (i.e. not in POP3 or IMAP mode), all the user's mailbox data is stored on the server. There is one exception to this: is if the client is set to download mail to a PST file, in which case the admin would have to be opening the user's PST file and modifying the information there. A PST file can only be open in one place at a time, so this would have to be done when the client was not running Outlook. Greg Lara ------------------------------------------------------------------------------------------------------- This e-mail message may contain privileged, confidential and/or proprietary information intended only for the person(s) named. If you are not the intended recipient, please destroy this message, and any attachments, and notify the sender by return e-mail. If you are not the intended recipient(s), or the employee or agent responsible for delivering the message to the intended recipient(s), you are hereby notified that any dissemination, disclosure or copying of this communication is strictly prohibited. ------------------------------------------------------------------------------------------------------- --------------------------------- From: Hazem Mustafa [mailto:hazemmustafa@xxxxxxxxxxx] Sent: Tuesday, September 07, 2004 2:33 PM To: [ExchangeList] Subject: [exchangelist] RE: Sent/Received User's emails Amendment at t he S erver http://www.MSExchange.org/ Hi Raj, Are you referring to message and user's mailbox at the machine or at the server ? the user machine has gone its been formated and a new operating system has been installed on it, all our recourses are only the Exchange server 5.5 but not the client which was Ms Outlook office 2000, we also have a backup tape, this is why we want to know if its possible for changes to have taken place on that user's sent old email stored at the server itself ? the user claims that the email brought forward diferece from the one he sent and used to have at his machine, the question is if any one has done any changes on that email at the server where its stored ? how ? and can those changegs be traced or not ? Please advise "Periyasamy, Raj" <Raj.Periyasamy@xxxxxxxxxxxx> wrote: http://www.MSExchange.org/ Yes, it wil still show the exact modified date. The Modified date/time is always stamped in the message. By selecting the field to view you are just viewing what is already in the message. Same applies every other field. It is there, you just select what field you want see or hide. By deleting field, that data is not lost, but just hidden. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: hazemmustafa@xxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx --------------------------------- ALL-NEW Yahoo! Messenger - all new features - even more fun!