Exchange 2010 search mailbox for messages sent to external addresses

[jcs808]

If I wanted to search a users mailbox for emails sent to a particular domain, could or how would I do this?

Thanks

[Meldrew]

Hi,

 

A couple of ways you could do this. Easiest is probably login to OWA as you, then connect to the users mailbox and do a search in their sent items for to:@domain.

 

Meldrew

[jamesb]

If you don't want to/can't do the login thing, or you shouldn't have access to the e-mails yourself (can happen as part of a sensitive investigation) then the Search-Mailbox cmdlet is your friend.

 

Use the copy option, and copy the e-mails either to a target user's mailbox for them to examine (HR or your counsel for example) or to a brand new mailbox just for the investigation. Also has the advantage that you're not connecting to the user's mailbox and potentially seeing sensitive material that they may have stored which is unrelated.

 

https://technet.microsoft.com/en-us/library/dd298173%28v=exchg.141%29.aspx

[jcs808]

If someone had their phone linked to their mailbox and sent emails from that device, would they show in the sent folder on OWA?

[jamesb]

If someone had their phone linked to their mailbox and sent emails from that device, would they show in the sent folder on OWA?

 

Yes - they're still passing through the server and stored in the mailbox.

[Oaktech]

If someone had their phone linked to their mailbox and sent emails from that device, would they show in the sent folder on OWA?

 

Although be aware if a mail is deleted on some phones the mail may not be in their outlook deleted items, it may be in a new folder called trash.