Is it possible to legitimately find out if an organisation uses an internal Exchange server (and what version) or any other service for their e-mails?
I am wondering if there is a way by analysing the autodiscover output of a domain or the header of an e-mail message OR any other way to establish what platform was used.We have been asked to put an IT service proposal together for a small company but the individual who is currently running their IT systems (very badly) is very secretive and refuses to give them any information and even locks the server room. It's a very delicate situation- they don't even have a contract with that person as he was a friend of one of the directors and they fear that he may just walk away with all the passwords etc if they were to challenge him...
Many thanks