Link to home
Start Free TrialLog in
Avatar of 8sh4
8sh4

asked on

How to track under shared Exchange 2003 email box environment?

Hi All,

Recently we have few incidents happen to our company shared email box where “selected” emails been deleted from the “Inbox” and also manually deleted again from the “Deleted Box”.

Due to the amount of users who have access to that mail box (20+), it is difficult to find out whom. Is there anyway to ping point out or track down who deleted? (via Log or Event History …?)

We have no problem to recover those emails and confirm emails missing because we have independent backup mail servers which receive identical emails. (Duplication for all emails at the ISP level.)

Our company is running Windows 2003 Domain environment for all users.

Thanks and regards,
Steven
Avatar of mass2612
mass2612
Flag of Australia image

You might be able to get more information by temporarilly turning up diagnostic logging on the MsExchangeIS > Mailbox properties but not sure. Never tried to find out.

http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3AdminGuide/954d0a97-5995-40bb-aa1b-e56bfd950fbc.mspx?mfr=true
Avatar of 8sh4
8sh4

ASKER

Have anyone tried it? Never used that logging feature...
I've used the logging features before but never to try to track deletions within a mailbox etc. Normally for troubleshooting issues with RUS, etc. It just gives you more detailed messages in the event logs. You would normally leave it off unless you are looking for a specific issue.
Avatar of 8sh4

ASKER

Is there ANYWAY to set the permission for the mail box be read ONLY ! for ALL USERS. (incld self.)
ASKER CERTIFIED SOLUTION
Avatar of mass2612
mass2612
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial