Confidential Requests for Employee Messages / Activity

Occasionally, IT may receive a request from an employee/manager for the following info:

• Teams chat messages between two employees
• Email messages between two employees
• Employee login activity
• Employee web browsing activity

Requests for Teams chat and email messages can only be honored if they come from Human Resources or the CEO and are submitted in writing from the appropriate party for sufficient documentation.

The appropriate IT admin (such as the FMHC CTO) can follow these steps to look up Teams chat messages between two employees for a specific date range: https://tayam-infra.net/can-system-administrator-see-your-chat-messages-on-microsoft-teams/  The extracted data can then be provided to the requesting party for their review.

IT has also provided managers data about their employee's login activity or web browsing activity upon their written request.  There are ways to get some information about an employee's login history through their computer's Event Viewer: https://www.lepide.com/how-to/audit-who-logged-into-a-computer-and-when.html  Perhaps more useful would be the user's Duo logs, as they should be receiving a Duo prompt/authentication request every time they unlock their computer.

Contact the IT Security Engineering team (any Sophos firewall admin) for data on a user's web browsing history.