Access to users email without changing password

[kenrick]

Hello,

 

I have been asked to retrieve an email form a colleagues account and apparently this can be done without having to change the users password. We are using Exchange 2013, can someone please advise how this can be achieved?

 

Thank you very much.

 

Paul

[thimon]

From memory if you go through the O365 Admin Portal, find the user's mailbox then add yourself (or whoever's requested access) to mailbox delegation under full access. It takes about an hour to update for us, but then the user's email account gets added to Outlook.

[3s-gtech]

If you are the Exchange admin, or can ask them to do it, you use the Exchange Admin Centre, double click on the user account, select "Mailbox delegation", and add your other account to the required permission. Then, log into OWA with that account, click on your username in the top right hand corner, select "Open another mailbox", type the name and search. Should come up. You can then browse their email.

 

Make sure you do this with proper authorisation and/or an audit trail!

[jmak]

If you are the Exchange admin, or can ask them to do it, you use the Exchange Admin Centre, double click on the user account, select "Mailbox delegation", and add your other account to the required permission. Then, log into OWA with that account, click on your username in the top right hand corner, select "Open another mailbox", type the name and search. Should come up. You can then browse their email.

 

Make sure you do this with proper authorisation and/or an audit trail!

∆∆ This.

 

I'd suggest that once you have a written request from someone with appropriate authority, you give the person requiring the information delegated rights to the mailbox, rather than yourself. Then they can look through the mailbox - not sure what your role is, but retrieving emails from an employee's account without their knowledge sounds like an HR or management task rather than an IT one.

[teejay]

The best way is to use the compliance centre, it give you a proper audit log of what you’ve done. When I used to use it I’d set up the search and the result would be sent to the relevant SLT member. Works well, especially if you need to look at multiple email accounts

[kenrick]

Thank you all, I have permission from the Bursar to do this on his behalf so no problem there. Thanks very much for the info, much appreciated.