Educause Security Discussion mailing list archives

Re: E-Discovery of remote PST files


From: "Childs, Aaron" <aaron () WSC MA EDU>
Date: Mon, 8 Dec 2008 16:05:42 -0500

Hi Dave,
  I think this may be what you're looking for:
http://support.microsoft.com/kb/310265  You would have to make your own c#
application using the code in the kb.  It would only find the message, not
forward it.  But at least you would have narrowed your search.  However you
may run into the problem that when Outlook is open on the users workstation
the PST file gets locked.

Aaron
-------------
Aaron Childs
Assistant Director, Networking
Westfield State College
http://www.wsc.ma.edu/it/
 
"I would rather write 10,000 notes than one letter of the alphabet."  
                -- Beethoven

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Dave Koontz
Sent: Monday, December 08, 2008 3:19 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] E-Discovery of remote PST files

All, our legal counsel are trying to comply with a legal request to turn
over all email communication campus wide regarding an individual over the
last couple years.  We do not archive messages, and the vast majority of our
users pull their email via POP3 to Outlook where those messages are stored
on their local PC.

Are there any tools you can recommend to remotely scan users PST files for
specific messages, and hopefully pull those messages out, or foward them off
to the administrator?

Obviously, we will have to come up with other methods for Mac users or those
using different email clients, but the vast majority are Outlook users... so
any help there would be greatly appreciated.  It will take forever to visit
hundreds of PCs.

Attachment: smime.p7s
Description:


Current thread: