Hi how can I track emails sent from internal users that contain attachments to external recipients from our Exchange 2007 Org? I have been requested by my security team to get this information and am not sure if this is possible without a 3rd party util! Thanks in advance!

On Mon, 10 Jan 2011 13:01:43 +0000, Lloyd Christmas wrote: >how can I track emails sent from internal users that contain attachments to external recipients from our Exchange 2007 Org? There's no logging of attachments in Exchange. They're just part of the overall message size. >I have been requested by my security team to get this information and am not sure if this is possible without a 3rd party util! You'd have to open each message to determine whether it's MIME or not, and then report on each body part. Keep in mind that lots of those little corporate logos and advertisements, as well as e-mail included in replies, will show up as attachments. It really sounds as if you want something link Data Leak Prevention (DLP). Just knowing the names of the attachments does nothing to help discover the contents of the message or attachments. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

It isn't possible without a third party tool. You would probably have to journal the email and then have something query the journal. Message tracking only tracks the actual core message, not the content. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

Although another option would be your AV. If you are running Exchange aware AV then it may well log the attachments it scans. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

many thanks for your responses! I will search for a 3rd party app to help me with this. Cheers!

We have used Attachmetric to great effect. There are a few download sites, but you can try http://attachmetric.com/download/ Hope this is useful for you Paul Das Client Services - ProFundCom 1 Berkeley Street London W1J 8DJ. T. +44 (0)20 7060 2146 F. +44 (0)871 247 4068 M. +44 (0)7725 988 956 E. paul.das@profundcom.net W. www.profundcom.net