Editing Emails stored in Hard disk

[CP]

Exact issue: I suspect that some of emails are modified in content by others
who had access to computer. I wanted to investigate further.

About Emails within Microsoft Outlook Express:
I have found that Microsoft Outlook Express 6 does not have any buttons to
edit email. However, you can export the eml file and edit them through
outside editor (such as notepad) and import back into outlook. This does not
show any change in property of Email- visible when clicking properties (sent/
received/ details and message source). Question is- Is there a way to find
out if email has been modified?

About Emails within Microsoft Outlook:
I have found that Microsoft Outlook allows editing any email stored on hard
disk by right clicking in email content and then clicking "edit email"
button. User can save then edited message.

I have also found that Outlook changes Last modified time to computer system
time when email is edited in above manner. However, If someone changes system
time to "received time" before clicking "save" button, it will remain the
same. Is there any other way to detect the email being changed?

If there is no way to detect this, please let me know.

 

[Roady [MVP]]

I don't think there is but that is true for any type of file that you have
access to. Security has to be at file level not through an indication like
modified date.

 

[CP]

Thanks Roady,

So what you are saying is
(a) It is possible to edit email and
(b) there is no way to detect if email are edited or not.
Please confirm both of above.

What do you mean by security at file level? How can we check at file level,
if any emails are modified?
--
CP

I don't think there is but that is true for any type of file that you have
access to. Security has to be at file level not through an indication like
modified date.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Exact issue: I suspect that some of emails are modified in content by
others
who had access to computer. I wanted to investigate further.

About Emails within Microsoft Outlook Express:
I have found that Microsoft Outlook Express 6 does not have any buttons to
edit email. However, you can export the eml file and edit them through
outside editor (such as notepad) and import back into outlook. This does
not
show any change in property of Email- visible when clicking properties
(sent/
received/ details and message source). Question is- Is there a way to find
out if email has been modified?

About Emails within Microsoft Outlook:
I have found that Microsoft Outlook allows editing any email stored on
hard
disk by right clicking in email content and then clicking "edit email"
button. User can save then edited message.

I have also found that Outlook changes Last modified time to computer
system
time when email is edited in above manner. However, If someone changes
system
time to "received time" before clicking "save" button, it will remain the
same. Is there any other way to detect the email being changed?

If there is no way to detect this, please let me know.

 

[Roady [MVP]]

I'm saying log times can be spoofed and messages can be edited. I'm
definitely not claiming b). There are auditing and security options
available for both Windows and Exchange server so no matter what solution
you are using (you failed to mention the mail account type) access can be
tracked.

You are asking me; Can people take something out of my house and place it
back without me noticing? Answer; Yes, they can.
Now you are blaming the object they took while in fact you should have
secured the house instead of each and every individual item in the house so
they can't reach the object in the first place.

Again; the solution depends on the mail account type that you are using but
it comes down to user account security, Exchange permissions and NTFS
permissions.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Thanks Roady,

So what you are saying is
(a) It is possible to edit email and
(b) there is no way to detect if email are edited or not.
Please confirm both of above.

What do you mean by security at file level? How can we check at file
level,
if any emails are modified?
--
CP

I don't think there is but that is true for any type of file that you
have
access to. Security has to be at file level not through an indication
like
modified date.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Exact issue: I suspect that some of emails are modified in content by
others
who had access to computer. I wanted to investigate further.

About Emails within Microsoft Outlook Express:
I have found that Microsoft Outlook Express 6 does not have any buttons
to
edit email. However, you can export the eml file and edit them through
outside editor (such as notepad) and import back into outlook. This
does
not
show any change in property of Email- visible when clicking properties
(sent/
received/ details and message source). Question is- Is there a way to
find
out if email has been modified?

About Emails within Microsoft Outlook:
I have found that Microsoft Outlook allows editing any email stored on
hard
disk by right clicking in email content and then clicking "edit email"
button. User can save then edited message.

I have also found that Outlook changes Last modified time to computer
system
time when email is edited in above manner. However, If someone changes
system
time to "received time" before clicking "save" button, it will remain
the
same. Is there any other way to detect the email being changed?

If there is no way to detect this, please let me know.

 

[CP]

Thanks again for quick response.

Regarding details you are looking for,

(a) it is household computer with pop3 account
(b) Uses ISP for e-mail account where messages are downloaded to hard disk
(c) Standard windows installation without any special secuirty provision

Please let me know if you need any further information.

Appreciate you rhelp

--
CP

I'm saying log times can be spoofed and messages can be edited. I'm
definitely not claiming b). There are auditing and security options
available for both Windows and Exchange server so no matter what solution
you are using (you failed to mention the mail account type) access can be
tracked.

You are asking me; Can people take something out of my house and place it
back without me noticing? Answer; Yes, they can.
Now you are blaming the object they took while in fact you should have
secured the house instead of each and every individual item in the house so
they can't reach the object in the first place.

Again; the solution depends on the mail account type that you are using but
it comes down to user account security, Exchange permissions and NTFS
permissions.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Thanks Roady,

So what you are saying is
(a) It is possible to edit email and
(b) there is no way to detect if email are edited or not.
Please confirm both of above.

What do you mean by security at file level? How can we check at file
level,
if any emails are modified?
--
CP

I don't think there is but that is true for any type of file that you
have
access to. Security has to be at file level not through an indication
like
modified date.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003
http://www.howto-outlook.com/
Outlook FAQ, HowTo, Downloads, Add-Ins and more

-----
Exact issue: I suspect that some of emails are modified in content by
others
who had access to computer. I wanted to investigate further.

About Emails within Microsoft Outlook Express:
I have found that Microsoft Outlook Express 6 does not have any buttons
to
edit email. However, you can export the eml file and edit them through
outside editor (such as notepad) and import back into outlook. This
does
not
show any change in property of Email- visible when clicking properties
(sent/
received/ details and message source). Question is- Is there a way to
find
out if email has been modified?

About Emails within Microsoft Outlook:
I have found that Microsoft Outlook allows editing any email stored on
hard
disk by right clicking in email content and then clicking "edit email"
button. User can save then edited message.

I have also found that Outlook changes Last modified time to computer
system
time when email is edited in above manner. However, If someone changes
system
time to "received time" before clicking "save" button, it will remain
the
same. Is there any other way to detect the email being changed?

If there is no way to detect this, please let me know.

 

[Roady [MVP]]

Running Windows XP Home?
Each member of the family has his/her own password protected user account?

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Thanks again for quick response.

Regarding details you are looking for,

(a) it is household computer with pop3 account
(b) Uses ISP for e-mail account where messages are downloaded to hard disk
(c) Standard windows installation without any special secuirty provision

Please let me know if you need any further information.

Appreciate you rhelp

--
CP

I'm saying log times can be spoofed and messages can be edited. I'm
definitely not claiming b). There are auditing and security options
available for both Windows and Exchange server so no matter what solution
you are using (you failed to mention the mail account type) access can be
tracked.

You are asking me; Can people take something out of my house and place it
back without me noticing? Answer; Yes, they can.
Now you are blaming the object they took while in fact you should have
secured the house instead of each and every individual item in the house
so
they can't reach the object in the first place.

Again; the solution depends on the mail account type that you are using
but
it comes down to user account security, Exchange permissions and NTFS
permissions.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Thanks Roady,

So what you are saying is
(a) It is possible to edit email and
(b) there is no way to detect if email are edited or not.
Please confirm both of above.

What do you mean by security at file level? How can we check at file
level,
if any emails are modified?
--
CP


:

I don't think there is but that is true for any type of file that you
have
access to. Security has to be at file level not through an indication
like
modified date.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003
http://www.howto-outlook.com/
Outlook FAQ, HowTo, Downloads, Add-Ins and more

-----
Exact issue: I suspect that some of emails are modified in content
by
others
who had access to computer. I wanted to investigate further.

About Emails within Microsoft Outlook Express:
I have found that Microsoft Outlook Express 6 does not have any
buttons
to
edit email. However, you can export the eml file and edit them
through
outside editor (such as notepad) and import back into outlook. This
does
not
show any change in property of Email- visible when clicking
properties
(sent/
received/ details and message source). Question is- Is there a way
to
find
out if email has been modified?

About Emails within Microsoft Outlook:
I have found that Microsoft Outlook allows editing any email stored
on
hard
disk by right clicking in email content and then clicking "edit
email"
button. User can save then edited message.

I have also found that Outlook changes Last modified time to
computer
system
time when email is edited in above manner. However, If someone
changes
system
time to "received time" before clicking "save" button, it will
remain
the
same. Is there any other way to detect the email being changed?

If there is no way to detect this, please let me know.

 

[CP]

Yes. Single password for all user.

--
CP

Running Windows XP Home?
Each member of the family has his/her own password protected user account?

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Thanks again for quick response.

Regarding details you are looking for,

(a) it is household computer with pop3 account
(b) Uses ISP for e-mail account where messages are downloaded to hard disk
(c) Standard windows installation without any special secuirty provision

Please let me know if you need any further information.

Appreciate you rhelp

--
CP

I'm saying log times can be spoofed and messages can be edited. I'm
definitely not claiming b). There are auditing and security options
available for both Windows and Exchange server so no matter what solution
you are using (you failed to mention the mail account type) access can be
tracked.

You are asking me; Can people take something out of my house and place it
back without me noticing? Answer; Yes, they can.
Now you are blaming the object they took while in fact you should have
secured the house instead of each and every individual item in the house
so
they can't reach the object in the first place.

Again; the solution depends on the mail account type that you are using
but
it comes down to user account security, Exchange permissions and NTFS
permissions.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003
http://www.howto-outlook.com/
Outlook FAQ, HowTo, Downloads, Add-Ins and more

-----
Thanks Roady,

So what you are saying is
(a) It is possible to edit email and
(b) there is no way to detect if email are edited or not.
Please confirm both of above.

What do you mean by security at file level? How can we check at file
level,
if any emails are modified?
--
CP


:

I don't think there is but that is true for any type of file that you
have
access to. Security has to be at file level not through an indication
like
modified date.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003
http://www.howto-outlook.com/
Outlook FAQ, HowTo, Downloads, Add-Ins and more

-----
Exact issue: I suspect that some of emails are modified in content
by
others
who had access to computer. I wanted to investigate further.

About Emails within Microsoft Outlook Express:
I have found that Microsoft Outlook Express 6 does not have any
buttons
to
edit email. However, you can export the eml file and edit them
through
outside editor (such as notepad) and import back into outlook. This
does
not
show any change in property of Email- visible when clicking
properties
(sent/
received/ details and message source). Question is- Is there a way
to
find
out if email has been modified?

About Emails within Microsoft Outlook:
I have found that Microsoft Outlook allows editing any email stored
on
hard
disk by right clicking in email content and then clicking "edit
email"
button. User can save then edited message.

I have also found that Outlook changes Last modified time to
computer
system
time when email is edited in above manner. However, If someone
changes
system
time to "received time" before clicking "save" button, it will
remain
the
same. Is there any other way to detect the email being changed?

If there is no way to detect this, please let me know.

 

[Pat Willener]

Well, there goes your security...

 

[Roady [MVP]]

Yup ;-)

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----