Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 548
  • Last Modified:

Who deleted folder in a shared mailbox (EX'10)

One sub folder in shared exchange mailbox is shared between many employees all with full access. Someone accidentally deleted it today. First of all all emails were restored, the only remaining question is who did it?

How do I find out who did it?

Appreciate any help.

Exchange 2010 STD.
0
Coffinated
Asked:
Coffinated
1 Solution
 
meko72Commented:
With employees having full control its going to be hard. Try looking in the system Logs.

If you knew about when this event occured you could look at the security logs to find out who logged in at that time. This will help narrow the search down then go ask the employee(s)


 
0
 
CoffinatedAuthor Commented:
Everyone was logged in and working within the office. It occurred at 2:12pm +/- 1 minute. Nobody admitted to it, perhaps whoever did it was unaware of it.
0
 
5g6tdcv4Commented:
The only way you are going to be able to tell is if you had audit logging enabled
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now