https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/Email-but-no-Login/m-p/1292#M890 <P>I have a situation where a student who recently left and I failed to close their account in a timely manner. That part is on me. However, my question to the group is...</P><P>If the there is an email that came from an account, shouldn't there be some other activity that can corroborate that this student's account had been logged into?</P><P>The theory is that the account being left open, but now "abandoned" because that student has moved on to another school, was being used by an existing (continuing) student to send out emails in the name of that departed student. I have the meta data and log information that the email really was sent by this account, but there's no corresponding login for that account. That is, the account appears to have last been logged into back in May--but an email from that account arrived this week, in October. That doesn't seem to jive in my head.</P><P>Newer, stricter Google rules should mitigate a spoofing situation of that account by not allowing most 3rd party email apps and the header data on the emails that were sent off don't support that theory. Is there another touchpoint that gets logged as account activity that might corroborate that someone actively logged into this abandoned account recently to send the email out? Or... does anyone have a way to rationalize this?</P> Wed, 04 Oct 2023 18:49:42 GMT jsb_tech 2023-10-04T18:49:42Z https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/Email-but-no-Login/m-p/1292#M890 <P>I have a situation where a student who recently left and I failed to close their account in a timely manner. That part is on me. However, my question to the group is...</P><P>If the there is an email that came from an account, shouldn't there be some other activity that can corroborate that this student's account had been logged into?</P><P>The theory is that the account being left open, but now "abandoned" because that student has moved on to another school, was being used by an existing (continuing) student to send out emails in the name of that departed student. I have the meta data and log information that the email really was sent by this account, but there's no corresponding login for that account. That is, the account appears to have last been logged into back in May--but an email from that account arrived this week, in October. That doesn't seem to jive in my head.</P><P>Newer, stricter Google rules should mitigate a spoofing situation of that account by not allowing most 3rd party email apps and the header data on the emails that were sent off don't support that theory. Is there another touchpoint that gets logged as account activity that might corroborate that someone actively logged into this abandoned account recently to send the email out? Or... does anyone have a way to rationalize this?</P> Wed, 04 Oct 2023 18:49:42 GMT https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/Email-but-no-Login/m-p/1292#M890 jsb_tech 2023-10-04T18:49:42Z https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/Email-but-no-Login/m-p/1293#M891 <P>In Gmail on your phone you only ever log in once. Unless you are forced to log out, which rarely ever happens.</P> Wed, 04 Oct 2023 18:58:39 GMT https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/Email-but-no-Login/m-p/1293#M891 Kim_Nilsson 2023-10-04T18:58:39Z https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/Email-but-no-Login/m-p/1294#M892 <P>Does the former student's account have any delegates?</P><PRE>gam user former.student@school.org show delegates</PRE> Wed, 04 Oct 2023 18:59:59 GMT https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/Email-but-no-Login/m-p/1294#M892 BrianGray 2023-10-04T18:59:59Z