Open it up in Outlook. Click on Options. Examine the headers. Or, use message tracking. Or, use the smtp protocol logs. From: exchangelist-bounce@xxxxxxxxxxxxx [mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Patrick Sent: Friday, April 24, 2009 5:55 AM To: exchangelist@xxxxxxxxxxxxx Subject: [ExchangeList] How to track internal emails - exchnage 2007 Hi guys, Some user has sent an email to all staff using the Administrator account. We just need to know if there is a way to track what workstation the email came from (IP address). Thanks Patrick