MOMT = MAPI on the Middle Tier means any client using Mapi... so that would be Windows Outlook...
Is it possible to see what OS someone used to send an email?
Our users can sign in on multiple devices but I'm trying to track the OS used to send emails. Does MS have to way to track emails per operating system or any way to identify that?
4 additional answers
Sort by: Most helpful
-
Andy David - MVP 152.3K Reputation points MVP
2021-11-22T16:18:14.837+00:00 You can get the client from message tracing:
https://markgossa.blogspot.com/2015/11/exchange-what-type-of-client-sent-email.html -
Andy David - MVP 152.3K Reputation points MVP
2021-11-22T16:46:05.187+00:00 You can use the built-in reporting for that:
https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/email-apps-usage-ww?view=o365-worldwide -
Andy David - MVP 152.3K Reputation points MVP
2021-11-22T17:56:57.157+00:00 The only way I am aware of is using the security center Explorer and accessing the headers of the message:
https://security.microsoft.com/threatexploreror use Cloud App Security if you are licensed for it and view the Activity log for that user.
You can also search the compliance logs for the "send message" event and see what that shows:
-
ChristyZhang-MSFT 25,446 Reputation points Microsoft Vendor
2021-11-23T03:05:30.367+00:00 Hi @keepmeanon ,
Welcome to our forum!
As I know, there's no such an option in Outlook client to check what OS someone used to send an email.
However, as I know, we can check the message header(open the received message>File>Info>Properties>Inter headers) and copy the content to Word or Notepad. And the find the following information:
X-Mailer:
Or User-Agent:
Both the two fields will show the version of Outlook, which can be used to identify the OS(Windows or Mac).
Hope to help you.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.