Approval of outbound mail before release?

[Bretto]

Hey Guy's

I have a client that would like to approve any outbound mail before it is released to its destination.

He has recently been the victim of a malicious employee who has successfully stolen money from the business by manipulating customer invoices and payment's. A majority of the manipulation was done using email.

He would like any outbound mail to be automatically sent to a holding area pending it's approval before being sent to it's destination

Can this be done with exchange?

All I realy need is a general leed as to how this might be done so I can research it further.

Regards,

Bretto.

 

[Anonym0us]

Try using 'Message Journaling' instead:

http://support.microsoft.com/default.aspx?scid=kb;en-us;261173

Also, be aware of any 'laws' that may pertain to email privacy.

 

[Bretto]

This will only keep a copy of all messages that have been sent/recieved. The desire is to prevent any malicious or misleading messages from being sent as it may too late by the time the journel is checked.

 

[Marcs41]

There is no such option, and even it there were, it would require him to read every email, which is in direct violation of privacy laws.
If he does not trust his people, he should fire them.
Trust in a company is hard, certainly after a bad experience, but if he has any doubts about a person, he should show them the door, period.
There are no technical solutions for such things, they may as well print it and fax it, or snail-mail it, or take it home, put it on floppy, etc. etc.. You cannot protect everything so he should not waste time and effort in securing one way out while all other are uncontrolable.

What he could do is isue a general note to everyone, stating from now on every email in and out is being monitored and logged, without actually doing it. That scares people enough.
If he wants to protect him against a law suit for violating privacy (yes, even in your own company), he should have everyone SIGN a document they are aware AND agree.
Then you can actually monitor it.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!
How Do You Get Great Answers To my Tek-Tips Questions?} See faq222-2244

 

[jahlmer]

Bretto,

I know none of us are Lawyers or work for law enforcement (at least not that I know of)... so I won't lecture you about the law.

Here's some articles to read about:

http://www.msexchange.org/articles/Email_security.html

I recommend a popup using Group Policy or a login batch file to notify users of the monitoring and consequences for using any portion of the system for non-business or malicious activity, and maybe a disclaimer.

I would consult a security company, to look into document mangement and security.

http://download.norman.no/manuals/eng/nec_en.pdf

http://www.documentlocator.com/email/

Hope this helps. :1