This is for one of my friends so I hope she has nothing to do with MN otherwise she'll figure out who I am.
We're talking about working in the public sector. If one delets certain e-mails and empties the deleted box on their work computer, can someone else retrieve them if they want to? And how would they go about it ? Would they need a good reason to start an investigation or they can just do it as a routine excercise?
All emails can be retrieved as they will be on the mail server backups but it would require a manager to order this I should think and a good reason. Its not the easiest or quickest thing to do and cant see IT staff doing it on a whim. Also the older the system the less chance of getting them back with older exchange servers it difficult to restore individual mailboxes. However if the mail was stared in a personal folder retrievig the amil would be much easier. But as I say IT are busy and wouldnt do thsi on a whim (cept me unless surfing here is counted as busy )
they are always monitored from what i understand, so when they are transmitted (inbox, send box) they can be intercepted if something arises suspicion or if they just feel like it.
but once that's done and you get rid of the emails, can they still find them?
yes they have backups on disc. Standard backup policy is to back up every night and keep for one week. Back ups on a Friday are kept for a month and the end of month backup disc is kept permenantly so that if the server fails the data is still intact.