RE: Sent/Received User's emails Amendment at t he S erver

  • From: Hazem Mustafa <hazemmustafa@xxxxxxxxxxx>
  • To: "\[ExchangeList\]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Tue, 7 Sep 2004 20:38:24 +0100 (BST)

hi Greg and thank you for your response and for the info. I agree with you but 
the senario is like the following : 
the user left the company, he was accessing his mailbox from the server, he 
also used PST to download all messages from the server but that is not 
important now I think as his machine was formated after he left, then he was 
asked about some information he should have submitted before he left the 
company, he claimed he did by a sent email, from the server the email I got 
from his mailbox doesn't include the info he insisted it was in his email, and 
he brought a copy of that in question old date sent email with full information 
including the bit missing in the copy we got for his mailbox at the server, he 
is accusing one of the admins he had an argument with before he left, the admin 
denies making any changes, we are not sure who is saying what and want to 
verify if this is possible to be done by an admin? and howo it could be traced, 
bare in mind our Exchange server 5.5 is not connected to the network no more as 
we are using Exchange 2003 instead
Please advise                                                       

"Lara, Greg" <GLara@xxxxxxx> wrote:
Hazim, keep in mind that with Exchange and Outlook in MAPI client mode (i.e. 
not in POP3 or IMAP mode), all the user's mailbox data is stored on the server. 
There is one exception to this: is if the client is set to download mail to a 
PST file, in which case the admin would have to be opening the user's PST file 
and modifying the information there. A PST file can only be open in one place 
at a time, so this would have to be done when the client was not running 

Greg Lara

This e-mail message may contain privileged, confidential and/or proprietary 
information intended only for the person(s) named. If you are not the intended 
recipient, please destroy this message, and any attachments, and notify the 
sender by return e-mail. If you are not the intended recipient(s), or the 
employee or agent responsible for delivering the message to the intended 
recipient(s), you are hereby notified that any dissemination, disclosure or 
copying of this communication is strictly prohibited.

From: Hazem Mustafa [mailto:hazemmustafa@xxxxxxxxxxx] 
Sent: Tuesday, September 07, 2004 2:33 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Sent/Received User's emails Amendment at t he S 
erver Hi Raj,
Are you referring to message and user's mailbox at the machine or at the server 
?  the user machine has gone its been formated and a new operating system has 
been installed on it, all our recourses are only the Exchange server 5.5 but 
not the client which was Ms Outlook  office 2000, we also have a backup tape, 
this is why we want to know if its possible for changes to have taken place on 
that user's sent old email  stored at the server itself ? the user claims that 
the email brought forward diferece from the one he sent and used to have at his 
machine, the question is if any one has done any changes on that email at the 
server where its stored ? how ? and can those changegs be traced or not ?
Please advise

"Periyasamy, Raj" <Raj.Periyasamy@xxxxxxxxxxxx> wrote:

Yes, it wil still show the exact modified date. The Modified date/time
is always stamped in the message. By selecting the field to view you are
just viewing what is already in the message. Same applies every other
field. It is there, you just select what field you want see or hide. By
deleting field, that data is not lost, but just hidden.

List Archives:
Exchange Newsletters:
Exchange FAQ:
Other Internet Software Marketing Sites:
World of Windows Networking:
Leading Network Software Directory:
No.1 ISA Server Resource Site:
Windows Security Resource Site:
Network Security Library:
Windows 2000/NT Fax Solutions:
You are currently subscribed to this Discussion List as: 
To unsubscribe visit
Report abuse to listadmin@xxxxxxxxxxxxxx 

 ALL-NEW Yahoo! Messenger - all new features - even more fun!  

Other related posts: