[slodave]

Pull the Hardrive, copy it......open it up. If he's stupid enuff to use company email, he's still got the emails.....no need to go to the server.

You can't just copy the drive. In this case, you'd need to hook the drive up to a write blocker.