How to enable message tracking
I need to find out who in my organization sent an e-mail to someone@domain.com. Is there any way to find that information out?

    Requires Free Membership to View

    When you register, you’ll also receive targeted alerts from my team of editorial writers and independent industry experts with the latest news, tips, and advice to help you do your job more efficiently and effectively. Our goal is to keep you informed on the hottest topics and biggest challenges faced by Exchange professionals today working with Exchange, Outlook and other related technologies.

    Margie Semilof, Editorial Director

    By submitting your registration information to SearchExchange.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchExchange.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

VIEW MEMBER FEEDBACK TO THIS ASK THE EXPERT Q&A.

Yes, the easiest way is to use message tracking. However, message tracking is not enabled by default. To enable message tracking open your Exchange System Manager (ESM), navigate to each Exchange server in your organization, view Properties and enable message tracking on the right on the General page.

It is important to enable message tracking on each server in order to be able to track any message sent to and from your organization. After message tracking is enabled, you can use the Message Tracking Center, which is located under the Tools folder in the ESM to search for someone@domain.com.

If this is something that you need to be able to do on an ongoing basis, you might want to jump on the archiving bandwagon. Many companies are now implementing e-mail archiving systems not just for data retention but also for the forensic capabilities.


MEMBER FEEDBACK TO THIS ASK THE EXPERT Q&A:

So are you saying that, if message tracking was not previously turned on, there is no way to track that specific message?
—Lynne W.

******************************************

You are correct. Unless something like message tracking is enabled, the events that occur during the transport of a message will not be captured and will not be available retroactively.
Richard Luckett, Security expert


Do you have comments on this Ask the Expert Q&A? Let us know.
Related information from SearchExchange.com:

  • Learning Center: 20 tips on securing Outlook in 20 minutes
  • Topics Library: Exchange security


  • This was first published in May 2005