Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 243
  • Last Modified:

How to track under shared Exchange 2003 email box environment?

Hi All,

Recently we have few incidents happen to our company shared email box where “selected” emails been deleted from the “Inbox” and also manually deleted again from the “Deleted Box”.

Due to the amount of users who have access to that mail box (20+), it is difficult to find out whom. Is there anyway to ping point out or track down who deleted? (via Log or Event History …?)

We have no problem to recover those emails and confirm emails missing because we have independent backup mail servers which receive identical emails. (Duplication for all emails at the ISP level.)

Our company is running Windows 2003 Domain environment for all users.

Thanks and regards,
Steven
0
8sh4
Asked:
8sh4
  • 3
  • 2
1 Solution
 
mass2612Commented:
You might be able to get more information by temporarilly turning up diagnostic logging on the MsExchangeIS > Mailbox properties but not sure. Never tried to find out.

http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3AdminGuide/954d0a97-5995-40bb-aa1b-e56bfd950fbc.mspx?mfr=true
0
 
8sh4Author Commented:
Have anyone tried it? Never used that logging feature...
0
 
mass2612Commented:
I've used the logging features before but never to try to track deletions within a mailbox etc. Normally for troubleshooting issues with RUS, etc. It just gives you more detailed messages in the event logs. You would normally leave it off unless you are looking for a specific issue.
0
 
8sh4Author Commented:
Is there ANYWAY to set the permission for the mail box be read ONLY ! for ALL USERS. (incld self.)
0
 
mass2612Commented:
Hi,

In order to give a group of users read only access I would create a mail enabled distrib group and assign all users to that group. Then logon to the mailbox via Outlook and configure the group with reviwer only rights via Tools > Options > Delegates.

I would then change the password for the associated account and not give it to anyone that you want to have the mailbox secured from.

This has some step by step info - http://www.wce.wwu.edu/Resources/TechServ/FAQDocs/Outlook/AssigningOutlookPermissions.htm
0

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now