Is there a log that I can find out who deleted emails in a shared email account?

One of our departments utilizes a shared email account to answer customer questions. Multiple people from our company manage this account. Today there were a large amount of emails deleted and we wanted to find out who did it. Is there a log to check that on the email server?

Each user has this generic account added to their outlook in addition to their personal company account.

We are running Exchange 2007 and Outlook 2003 in our environment.
ecardenasAsked:
Who is Participating?
 
TalkExchangeCommented:
I dont think so even with audit log in Exchange 2007 you cannot find any information about how deletes the email. But you can definetly find who opened it etc and can sense who might have deleted it but thats for future.

Check this

http://technet.microsoft.com/en-us/library/ee221156(EXCHG.80).aspx

"
Important:



Access Auditing does not audit message deletions, only message access."

A similar question was asked in another forum


http://social.technet.microsoft.com/Forums/en-US/exchangesvrsecuremessaging/thread/e9548dc8-1316-47da-a7d4-32f264e38131/

They talk about IRM but as the mailbox is shared it may not be helpful but you can enable the registy keys to recover deleted items.


0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.