Outlook - can one determine WHEN an email was opened (without read receipt switched on)

%3CLINGO-SUB%20id%3D%22lingo-sub-3003981%22%20slang%3D%22en-US%22%3EOutlook%20-%20can%20one%20determine%20WHEN%20an%20email%20was%20opened%20(without%20read%20receipt%20switched%20on)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3003981%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20a%20way%20to%20retrospectively%20track%20(say%20at%20the%20admin%20level%20or%20any%20other%20way)%20WHEN%20a%20particular%20user%20has%20opened%20a%20particular%20email%20in%20Outlook%3F%20In%20this%20instance%2C%20the%20sender%20did%20not%20switch%20on%20the%20%22read%20receipt%22%20functionality.%3CBR%20%2F%3EI%20see%20there%20are%20message%20trace%20options%20but%20it%20appears%20they%20only%20record%20if%20an%20email%20was%20delivered%2C%20failed%2C%20filtered%20as%20spam%2C%20etc%20as%20opposed%20to%20actually%20when%20the%20email%20was%20opened.%3C%2FP%3E%3CP%3EI%20found%20a%20mention%20of%20something%20called%20%22eDiscovery%22%20-%20in%20my%20brief%20reading%20I%20am%20still%20unsure%20if%20it%20can%20do%20what%20I%20am%20wanting.%20Any%20thoughts%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3003981%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EeDiscovery%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Groups%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20Apps%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3004361%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%20-%20can%20one%20determine%20WHEN%20an%20email%20was%20opened%20(without%20read%20receipt%20switched%20on)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3004361%22%20slang%3D%22en-US%22%3EAdvanced%20audit%20has%20the%20MailItemAccessed%20event%2C%20which%20can%20help%20you%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fadvanced-audit%3Fview%3Do365-worldwide%23mailitemsaccessed%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fadvanced-audit%3Fview%3Do365-worldwide%23mailitemsaccessed%3C%2FA%3E%3CBR%20%2F%3EWithout%20this%2C%20you%20can%20only%20tell%20whether%20a%20message%20was%20read%2C%20not%20when.%3C%2FLINGO-BODY%3E
New Contributor

Is there a way to retrospectively track (say at the admin level or any other way) WHEN a particular user has opened a particular email in Outlook? In this instance, the sender did not switch on the "read receipt" functionality.
I see there are message trace options but it appears they only record if an email was delivered, failed, filtered as spam, etc as opposed to actually when the email was opened.

I found a mention of something called "eDiscovery" - in my brief reading I am still unsure if it can do what I am wanting. Any thoughts?

3 Replies
Advanced audit has the MailItemAccessed event, which can help you here: https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwide#mailite...
Without this, you can only tell whether a message was read, not when.

Hi @Vasil Michev thanks for the reply on this. Is this functionality only available at the Outlook Admin level or can any user do this on their own mailbox? Context is I was asked by a manager if it was possible. I am just a standard end user with no admin access.

 

That's admin level. And will only apply to users internal to your organization, forgot to mention that. As an end user, the best you can do is toggle a read receipt and hope the recipient honors it.