deleted email address

[pct3ch]

For the past few weeks, I have noticed a couple of users have had one of their SMTP email addresses removed from their list of addresses. Is there a security setting I can enable to check what or who removed the address?

Thanks!

 

[Marcs41]

Are you sayinf 'someone' was on the server and you don't know who? If that is the case, THAT is security issue!

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!
How Do I Get Great Answers To my Tek-Tips Questions?} See faq222-2244

 

[pct3ch]

We are in an ADS environment and I know other admins in different sites have admin rights to our site. I would like to know if this was done by one of them or just some random occurance.

 

[Marcs41]

that is certainly not a random occurance, so ... I think you need to talk to someone.
If you have several people poking around your server, you should have some way of logging what anyone does at any time. The least they can do is let you know by e-mail of course, and stating a reason.
If it continues and there is no-one taking responsibility for it, bloack all external access and wait to see if it does happen again. If they complain, complain back, with reason! YOUR server is being abused/misused, and you don't know by who, that is reason enough.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!
How Do You Get Great Answers To my Tek-Tips Questions?} See faq222-2244

 

[Zelandakh]

Go to your Exchange Server. Change the inherited permissions from the server that come down from the org and site so they only get VIEW not Full.

Then if it happens again it is your admins, not someone else's.

<signature for rent>