We have a customer that is considering using S/MIME in Outlook 2010 (with Exchange 2010 although I don't think that matters) for all internal e-mail communications.
If they do this, then is the recovery scenario for "I need to get into another user's mail" the following?
use recovery agent to get private key from the certificate authority
import cert with target user's cert into recovery agent cert store
grant recovery agent full control over target mailbox
Open target mailbox as recovery agent and find information or whatever
If that's not right, what would the process be?
(Note: I'm not really looking for "don't use that process" as an answer right now - there are other alternatives already being discussed - this is more just around understanding this very specific case.)
Thanks!
