Forum Discussion
Jacob Stimpson
Dec 29, 2017Copper Contributor
Identify which device sent email
Is there a way to see what device sent an email message? We have a user that is sending hundreds of spam emails a day and has several computers. We plan to wipe and reinstall windows but we don't w...
Jacob Stimpson
Dec 29, 2017Copper Contributor
using the Admin center Email activity page I see that the user sent 35 emails in the last 7 days.
Using message trace in EAC with 7 day date range the same account as sender shows 839 email messages.
- VasilMichevDec 29, 2017MVP
Do you have mailbox auditing enabled for that user, specifically the Owner level? They will expose some details on the client for different mailbox-level operations. Other than that, your best bet would be the Audit logs in the SCC, which will show you login attempts.