+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 23
How do you do....it? Thread, Exchange email monitoring in Technical; Starting in September we are going to give students school email via our Exchange 2000 box. Has anyone got any ...
  1. #1
    altecsole's Avatar
    Join Date
    Jun 2005
    Location
    Whittington, Lancashire
    Posts
    286
    Thank Post
    40
    Thanked 37 Times in 27 Posts
    Rep Power
    26

    Exchange email monitoring

    Starting in September we are going to give students school email via our Exchange 2000 box. Has anyone got any suggestions for plugins etc. for monitoring student email? In particular for offensive mails etc.

  2. #2

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,436
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678

    Re: Exchange email monitoring

    Make them use Outlook Web Access. It will save you alot of time and energy as all it involves is a shortcut on their desktops. This will also remove acess to features and address lists you don't want them to see.

  3. #3

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Exchange email monitoring

    This is a can of worms.

    Unless you've got the right clauses in your AUP your not allowed to monitor it.

    If you do, you can setup a user who has read access to all the mailboxes. Then you can connect to the exchange server as that user and browse all the inboxes and outboxes.

    I suppose exchange based antispam plugins would also be able to pick up offensive words, etc in emails but I very much doubt you'd be able to justify the cost of them. They are typically tens of thousands of pounds.

    The solution we have here uses a Linux box sat inbetween the exchange mail server and the rest of the world. It'll junk anything it thinks is spam. This includes most offensive stuff. It detects it as porn mostly.

    We do not do any manual monitoring, we don't have the manpower.

    Oh yes, all your efforts will be for nothing as soon as the little darlings discover GPG.

  4. #4
    altecsole's Avatar
    Join Date
    Jun 2005
    Location
    Whittington, Lancashire
    Posts
    286
    Thank Post
    40
    Thanked 37 Times in 27 Posts
    Rep Power
    26

    Re: Exchange email monitoring

    Quote Originally Posted by Dos_Box
    Make them use Outlook Web Access. It will save you alot of time and energy as all it involves is a shortcut on their desktops. This will also remove acess to features and address lists you don't want them to see.
    Yes, we've already setup Outlook Web Access for them. Thanks.

  5. #5
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    275
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Exchange email monitoring

    ...something i'm very concerned about altecsole. [although i'm using open source solutions]

    I don't get why we don't have full access rights to students emails. Isn't it the same as any other student information we store - we have a duty of care to protect them while they are in our care - at school.

    What would happen if you had to delve into someones data stored on the system [anyone now] and it was encrypted - do the employers have the right to make the person give access to them??

    just a-wonderin'

  6. #6

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Exchange email monitoring

    Again, I'll point out RIPA. If you've not put something in your Email AUP so that your users wave their rights your heading down a pit full of sharp pointy sticks at high speed.

    RIPA only applies to the Government and its agencies. That means schools.

  7. #7
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    275
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Exchange email monitoring

    Ok - reading that Geoff - sorry for being a bit slow! ops:

    You're really hot on this stuff huh!

  8. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Exchange email monitoring

    I used to work for the Police. I got loads of training on RIPA/Human Rights/etc when the laws were passed.

  9. #9
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    275
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Exchange email monitoring

    Ouch - my eyes hurt!!!

    so...

    I have to have consent to intercept communication - which I get by force by not giving access to the system without it.

    and...

    the law provides that if it were necessary to access encrypted data qualifying bods could demand it [now you can all sleep soundly - ok? :P]

  10. #10

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Exchange email monitoring

    I have to have consent to intercept communication - which I get by force by not giving access to the system without it.
    Yes, like I said, you need something about email monitoring in your AUP. Presumably for both Staff and Pupils. Otherwise you have to trot off to the nearest judge for a search warrant every time..

    the law provides that if it were necessary to access encrypted data qualifying bods could demand it
    They will likely demand the decryption key off the school if its an employee or off the childs parents if its a pupil. Faliure to do so gets you a nice jail sentence. If any staff are using any encryption you should make sure you have a copy of their private encryption keys...

  11. #11
    ICTNUT's Avatar
    Join Date
    Jul 2005
    Location
    Hereford
    Posts
    1,419
    Thank Post
    196
    Thanked 249 Times in 122 Posts
    Rep Power
    63

    Re: Exchange email monitoring

    Hi Geoff,

    As a Network Admin I have a duty to protect the students from various things that could fly in by email, SPAM, PORN, Etc but no-one yet has mentioned the bullying by email side of things.

    I does go on and we know this, how are we meant to do our jobs if, and I am not pointing at you Geoff, people keep sticking legislation in the way.

    I use a whole suite of products from GFI and thier Mail monitoring and security addins for exchange are second to none.

    These are automated monitoring of emails and no one actually looks at the emails unless one is flagged, and then only myself and one other has access.

    Does the automated monitoring of emails still require consent??

  12. #12

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Exchange email monitoring

    Does the automated monitoring of emails still require consent??
    Probably.

  13. #13

    russdev's Avatar
    Join Date
    Jun 2005
    Location
    Leicestershire
    Posts
    6,985
    Thank Post
    735
    Thanked 559 Times in 374 Posts
    Blog Entries
    3
    Rep Power
    206

    Re: Exchange email monitoring

    even automated monitoring i.e ones for spam etc would have thought it would be the same...

    also remeber if you have abillity to do it then you must inform them....

    Our isp gives us ability to filter and monitor email etc we do not do as a rule but ability is there so we inform them we can and will and then problem solved.

    Russ

  14. #14

    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    634
    Thank Post
    11
    Thanked 6 Times in 6 Posts
    Rep Power
    22

    Re: Exchange email monitoring

    Quote Originally Posted by ICTNUT
    I use a whole suite of products from GFI and thier Mail monitoring and security addins for exchange are second to none.
    Would that be the freeware versions, or otherwise?

    Cheers,

    Andy.

  15. #15

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    Boston, MA
    Posts
    7,601
    Thank Post
    110
    Thanked 771 Times in 599 Posts
    Rep Power
    183

    Re: Exchange email monitoring

    Just tell the users that you will be monitoring email and all activity on the ICT systems and that should cover you. Stick it in your AUP and then make them sign to say that they understand.

    I'm sure that we've been over this before.

    @ICTNUT: As for bullying, that is the main reason for monitoring email. Unfortunately we are not all able to afford MailEssentials so we just have to randomly check mailboxes when we have a spare 10 minutes or check the mail of those people that the teachers suspect or know are being bullied.

    FYI I also block access to webmail so that the little darlings are forced to use their school account - this means that they cannot be bullied by email in school without us being able to monitor it. It's then a matter for the parents to deal with at home since it is out of our control.



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 0
    Last Post: 1st November 2007, 01:55 PM
  2. Email name change for user in exchange
    By Uraken in forum Windows
    Replies: 4
    Last Post: 18th May 2007, 11:17 AM
  3. Email Disclaimers - Exchange 2003
    By timbo343 in forum Windows
    Replies: 4
    Last Post: 9th May 2007, 03:58 PM
  4. Monitoring exchange mailboxes
    By pickman in forum Windows
    Replies: 4
    Last Post: 10th February 2006, 10:06 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •