I have a message on hold that is suspected of abusing the enterprise system.
However in order to prove the case we need to have a view of the source of the message.
All the users in the company signed an agreement that allowing us to view any mail sent or recieved on the server, so legally there is no problem.
But how can it be done technically?
I need to view the message and then to release it if it is a false alarm.
Any ideas on how to get to see the source of the message in the queue?