by

Mining the clientinfo property in Messages in Change 2013 and Workplace365 with EWS

Mining the clientinfo property in Messages in Change 2013 and Workplace365 with EWS Monitoring the bewildering array of shoppers and totally different Web browsers which can be getting used to ship e mail on Change could be an attention-grabbing problem particularly when your shoppers are within the cloud. One Mapi property that will get set on the SentItem within the senders Mailbox may help reply a few of these questions the place logs might not be obtainable. The Named Mapi property clientinfo eg

So if you happen to write a script that accesses this property on messages within the SentItems folder you’ll be able to construct a report of the totally different sending strategies which can be getting used and in addition totally different properties such because the browser model from the agent string being saved eg one thing like this

I’ve put a script on GitHub right here https://github.com/gscales/Powershell-Scripts/blob/grasp/GetMailUserAgentsv2.ps1 that may mine the info within the property accurately bearing in mind the ; used as a separator whereas additionally coping with knowledge enclosed in ( ) (it does this by simply doing a personality by character parse reasonably the splitting or utilizing Regex). The script will separate the Major ClientType and additional consumer info (eg browser agent string) from the clientinfo property.

The script has a number of totally different choices by default it’ll consider each message within the SentItems folder if you happen to use the -days swap you’ll be able to specify what number of days to look again eg

Get-MailUserAgents -Mailbox consumer@area -days 14

Will take a look at messages for the final 14 days, if you wish to consider messages within the Inbox you should use the -Inbox swap which is able to change the goal folder to the Inbox.