Exchange 2007 logging user activity
Posted on 2009-12-18
We have a user who has sent an email we suspect from their PC, we need to prove whether this user sent the email from their PC or if someone else could have sent it using OWA, we can see the emails in the message tracking, however there doesn't seem to be any obvious suggestion of the method the email was sent. This user has a MAPI connection to the exchange server and also has OWA access.
Is there any other log files I can check to see this information?
On a separate issue does exchange log when a user deletes an email?