[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 262
  • Last Modified:

Tracing the delivery of a message in Exchange 2003

Hi All,

We had someone make a huge mistake costing our corporation a lot of money.  What i need to do is trace a message, that was sent internally to an internal distribution list.  One of the users who caused this claims they didn't receive this message.  Is there any logs or how can i go about finding that this message was sent to his mailbox at 3:21pm yesterday?

Thanks!
0
maestro2be
Asked:
maestro2be
  • 2
  • 2
1 Solution
 
Wonko_the_SaneCommented:
Assuming that the logging is enabled, you can just go to message tracking in the Exchange System Manager (under "Tools"), type in the name of the sender or recipient and track the message. It will list all recipients of the message and if the message was delivered.
0
 
maestro2beAuthor Commented:
Thanks.  i went to where you said and did the search and it found it and showed me that it was sent to the person in question.  Now my question would be, can i prove he deleted it and what time?  Is that logged?

Thanks!
0
 
Wonko_the_SaneCommented:
This is usually not logged. However there might be a way:
Use Outlook to connect to the user's mailbox, then go to "recover deleted items" in the "Tools" menu. This depends on the setting on your Exchange server, but if it is set to keep deleted items and the user did not purge the message, you might be able to see when it was deleted.
0
 
SembeeCommented:
If message tracking shows the message being delivered to the mailbox then the message was delivered. Individual message delivery is not logged. You could look in deleted items or recover deleted items to see if the message is in there. You could also look for views, rules etc that could have moved the messages.

Simon.

--
If your question has been answered, please remember to accept the answer and close the question.
0
 
maestro2beAuthor Commented:
Thanks for the information guys.  I awarded the points to Wonko because he did perfectly answer the exact question I originally asked.  As far as the finding the deleted it was mandated against the policy of retaining deleted messages so I knew that wasn't available to me at the time, but thanks for the possible solution.  This incident will probably spark the reversal of that mandate to start keeping deleted messages for a period of time.

Thanks!
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now