Hello folks, thanks for taking the time to read this. I do a lot of work on Exchange 2007 & I have an investigator at my department that wanted to know if it is possible to get a time stamp off an E-mail of when it was "OPENED"? I know the header will show time stamps on E-mail servers that were passed through, etc. But what about when the person actually opens the E-mail? ?
I don't think Exchange specifically tracks first opening of a message, although if read receipts are used (and retained) you could draw on them to answer the question.
Note that there is a Modified Date on a message changing the message flag from 'Unread' to 'Read' (as happens by default when reading an unopened message in an Outlook client) does change the Modified Date, but other actions (e.g. replying to or forwarding a message) also update the Modified Date, so the current value of the field couldn't be taken conclusively to be the date when the email was first read.
Thank you