Hi Everybody,
we had internally the same issue and it was very critical. We have 2 separated Business Units (BU):
- Sales
- Legal
Legal BU works with "Case" regarding secrets topics and issues about customers, vendors and even employees. Since we talk about sensible and private information, Legal don't want to share in any case their own information with the other BU.
By us happened following:
- User of BU "Legal" tracked manually an important email (with private content) in CRM, in order to share within his own BU important information about that specific case.
- After that, the same user sent the same email, trough Outlook, to the CEO of the company, so that he could also be informed.
- Since the CEO worked actively with customers and opportunities, he was a CRM User but of the other BU that means "Sales"
- By CEO the tracking option in his personal settings was set on "Email Messages in response to Dyn365 email".
- Due too the active tracking option, once the email came into the incoming Outlook folder of our CEO, the email was automatically tracked as a new activity into Dyn365.
- The new tracked activity was owned by CEO and hence by BU Sales.
- As consequence all Users of BU Sales coul read the private email and its private content.
Since then we decided to deactivate following:
1) Personal settings Tracking Option and we put it on "No Email Messages".
2) System Settings - Email "Track emails sent between Dyn365 users as 2 activities" was set OFF
Since then it has never happened again, therefore I'm quite sure that put the tracking option on "NO Email Message" is the solution for this problem.
To be honest, such important setting cannot be managed as personal settings, it must be controled at administrator level.
Leave such an option to be managed directly from normal users is not a good idea and expose the owhl organisation to a big risk of privacy failure.
I also spoke to microsoft support in England but they confirm that this is standard behavior in Dyn365,
Crazy!!!!!
I hope I could help you a little bit.
Bye
A.L