Some people always want to blame someone else. Finally had them move their domain mail to their own server with their own logs in house. This way they stopped bothering our engineers and tech support every couple of hours. If they spent as much time looking after their business as they were trying to catch mythical intruders they would be a success. Can't speak for all platforms, but passwords are plain text on NT so if someone had access to the server, they could grab it there.
Passwords Is there a way of displaying passwords for users when they web into cgate.
Wants to know who and how the password was retrieved.