I have been asked to retrieve all email from the two involved employees.
So our Administration can evaluate the validity and severity of the accusation.
I don’t know how to go about this. My only guess is something with message tracking.
We will probably have to restore/retrieve/scan multiple backups; I do not think a retention policy has been set.
We have our exchange server’s Windows backup utility do a daily backup of system state & exchange, and weekly full backup, and monthly. These are archived to a local drive, tape backup, offsite server and monthly burned Ghost DVD.
Thank you in advance for your assistance.