Removing an email through Exchange 2003
Results 1 to 7 of 7

Thread: Removing an email through Exchange 2003

  1. #1
    Senior Member Info Tech Geek's Avatar
    Join Date
    Jan 2003
    Location
    Vernon, CT
    Posts
    828

    Removing an email through Exchange 2003

    My IT Manager has a user who sent an email externally and wants to recall the email without the user knowing it was recalled. I understand this is past the point of no return, but to look like superwoman, she wants a method of opening up exchange and deleting the email, so it looks like "everything" was deleted.

    Can someone tell me how to open up a users mailbox in exchange and delete an email from the user's sent box?

  2. #2
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    http://www.msexchange.org/tutorials/MF013.html

    Is this what you mean, info?
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  3. #3
    Senior Member Info Tech Geek's Avatar
    Join Date
    Jan 2003
    Location
    Vernon, CT
    Posts
    828
    Quote Originally Posted by snarkballz
    I hear not sending it in the first place works well?
    That usually works for me.

  4. #4
    Senior Member Info Tech Geek's Avatar
    Join Date
    Jan 2003
    Location
    Vernon, CT
    Posts
    828
    Quote Originally Posted by MsMittens
    That is perfect!

  5. #5
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,192
    ITG,

    That doesn't make sense? don't you mean that your manager has a user who wants the mail recalled without the intended recipient knowing about it?

    That is not possible by legal methods, IMO once it arrives at the recipient's mail server it is their property, and out of bounds.

    Also be very careful and don't trust anyone at your place, particularly after what you have told us.


    Remember that there are such things as notorised hard copies, electronic recovery copies (provided you have that turned on in Exchange), audit log copies, and that the message could well be stored on the local machine as well. Not to mention on backup tapes or whatever you guys use?

    If all the user wants is to delete it, then why don't they just go ahead and do it? That is a legitimate function within Microsoft Exchange, but I don't think that it would cut much ice in front of a Grand Jury?

    Incidentally, that application looks as if it might only work with inboxes rather than sent mail folders. After all, deleting something that is sent is pointless, and Microsoft know it, and the user can always delete their own records anyways.

    Personally, I would just advise them to delete via the normal system, I certainly wouldn't have a hand in it! I would see no justification in risking making myself unemployable for people who obviously don't give a crap about me?

    If you want to seem helpful, tell them to be sure to check for any cc. or bcc.s that may also have been sent?

    Perhaps this guy could give them a few pointers?

    http://news.bbc.co.uk/onthisday/hi/d...00/2772471.stm






    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  6. #6
    Senior Member
    Join Date
    Jul 2001
    Posts
    420
    Quote Originally Posted by nihil
    ITG,

    That doesn't make sense? don't you mean that your manager has a user who wants the mail recalled without the intended recipient knowing about it?

    That is not possible by legal methods, IMO once it arrives at the recipient's mail server it is their property, and out of bounds.

    Also be very careful and don't trust anyone at your place, particularly after what you have told us.


    Remember that there are such things as notorised hard copies, electronic recovery copies (provided you have that turned on in Exchange), audit log copies, and that the message could well be stored on the local machine as well. Not to mention on backup tapes or whatever you guys use?

    If all the user wants is to delete it, then why don't they just go ahead and do it? That is a legitimate function within Microsoft Exchange, but I don't think that it would cut much ice in front of a Grand Jury?

    Incidentally, that application looks as if it might only work with inboxes rather than sent mail folders. After all, deleting something that is sent is pointless, and Microsoft know it, and the user can always delete their own records anyways.

    Personally, I would just advise them to delete via the normal system, I certainly wouldn't have a hand in it! I would see no justification in risking making myself unemployable for people who obviously don't give a crap about me?

    If you want to seem helpful, tell them to be sure to check for any cc. or bcc.s that may also have been sent?

    Perhaps this guy could give them a few pointers?

    http://news.bbc.co.uk/onthisday/hi/d...00/2772471.stm






    I think from a legal prospective it depends on the country. AFAIK in the US corporate email is consider corporate property and as such can be deleted before the recipient sees it. In a previous job an employee sent a mail criticizing a project and providing salaries for several managers all the way up to the CTO. The mail was sent around 1130 and the Exchange team was able to have it deleted before most people were back from lunch.

    I work for a Germany company and the German government has rules similar to what you describe. I agree that you should check with legal but it might be ok if your in the US (sorry can't recall you location).

    Cheers,
    -D
    If you spend more on coffee than on IT security, you will be hacked. What\'s more, you deserve to be hacked.
    -- former White House cybersecurity adviser Richard Clarke

  7. #7
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,192
    Hi -D,

    I read this:

    My IT Manager has a user who sent an email externally
    And took it to mean that the e-mail had left the corporation and reached another legal entity.

    To access someone else's computer system and delete an e-mail would be a criminal offence both in the USA and in the EU.

    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

Similar Threads

  1. Port List
    By ThePreacher in forum Miscellaneous Security Discussions
    Replies: 17
    Last Post: December 14th, 2006, 08:37 PM
  2. August security hotfixes
    By mohaughn in forum Microsoft Security Discussions
    Replies: 1
    Last Post: August 9th, 2005, 07:37 PM
  3. October MS updates
    By mohaughn in forum Microsoft Security Discussions
    Replies: 2
    Last Post: October 13th, 2004, 04:31 AM
  4. The Worlds Longest Thread!
    By Noble Hamlet in forum AntiOnline's General Chit Chat
    Replies: 1100
    Last Post: March 17th, 2002, 08:38 AM
  5. How to read email header
    By rajat in forum Roll Call
    Replies: 0
    Last Post: February 20th, 2002, 04:08 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides