• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 552
  • Last Modified:

Who deleted folder in a shared mailbox (EX'10)

One sub folder in shared exchange mailbox is shared between many employees all with full access. Someone accidentally deleted it today. First of all all emails were restored, the only remaining question is who did it?

How do I find out who did it?

Appreciate any help.

Exchange 2010 STD.
0
Coffinated
Asked:
Coffinated
1 Solution
 
meko72Commented:
With employees having full control its going to be hard. Try looking in the system Logs.

If you knew about when this event occured you could look at the security logs to find out who logged in at that time. This will help narrow the search down then go ask the employee(s)


 
0
 
CoffinatedAuthor Commented:
Everyone was logged in and working within the office. It occurred at 2:12pm +/- 1 minute. Nobody admitted to it, perhaps whoever did it was unaware of it.
0
 
5g6tdcv4Commented:
The only way you are going to be able to tell is if you had audit logging enabled
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now