Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

For an Microsoft Exchange server, is it possible to encrypt the email database such that the sysadmin cannot see the emails?

In other words, the admin would be responsible for all aspects of running the Windows server and Exchange process, but would not be able to see the contents of any one email (except those sent to him, obviously). Only another individual (e.g. company owner) would be able to see all emails contained in the database.

share|improve this question
2  
If you don't trust your admin, get a new admin. They have the keys to the kingdom...you can't really prevent them from doing bad things, you can only trust them not to. –  Grant Sep 14 '12 at 13:17
    
How do you expect him to perform the most essential task of backing up your data? What would prevent him from just intercepting new messages before they are delivered to the mail server? –  Zoredache Sep 14 '12 at 15:22
    
@Zoredache Even if that wasn't true, the server would still need to hold the key in RAM, from where an administrator could extract it. Encryption only ever protects against offline attacks. –  Ansgar Wiechers Sep 14 '12 at 19:41

3 Answers 3

up vote 3 down vote accepted

The "supported" answer to what you're looking for involves using a public key infrastructure (PKI) and using the built-in encryption and digital signature functionality in Microsoft Outlook to encrypt/sign messages "client side". Anyone on the Internet sending you messages would need to encrypt email they're sending to you.

This is strictly a client-side issue. There are no mechanisms in current versions of Exchange to handle encryption of email server-side.

share|improve this answer

In short, no. Sorry. As others have noted, if you don't trust your admin change admins. You can always setup physical controls at the server, no RDP, two sets of eyes at console.... But really, you need to trust IT.

And BTW- from an encryption standpoint, you are really more asking if mailboxes can be encrypted. This would involve some sort of asymmetric, PKI based encryption style. I think there are some solutions out there. But still, SMTP comes in plaintext....

share|improve this answer

A better solution would be to audit access. Totally agree with sentiments above - an administrator is by definition, someone who you must trust. However, audit trails can be used to check that their level of privilege isn't being mis-used.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.