IT Support Providers can use Quest (CU's Active Directory tool) to query CU's LDAP for email forwarding and date/ time someone's password was change (by them, or scrambled by IT Security).