Calendar meeting items

Posted on 2011-10-28
Last Modified: 2012-05-12
Our President claimed that he did delete the calendar item using his smartphone but that particular calendar items still on his mac outlook 2011. His secretary informed us the details of that particular calendar meeting. His secretary would like to know if  there anybody added the deleted calendar items

We are not allowed to access his mac and smartphone. He will not allow anybody to access his mailbox. He need us to investaigate from back ends.

I had use MFCMAPI to view his calendar and deleted items. I saw that the said calendar still on his calendar entry. Checked on Deletem Items, there is no such calendar items was deleted. We just found the deleted items (Accepted:meeting) which he did received while attendees accept his meeting.

We did checked on Active sync logs but it not provide very less details. Is there any way or tool that can capture when items in calendar was deleted such as event viewer.

If we have a tool or guideline so that we can do a testing at our outlook.

Please advice
Question by:suriyaehnop
    LVL 14

    Accepted Solution

    If you had auditing tools like Quest Change Auditor for Exchange, you can identify who preformed what action from which computer on what time. As long as you dont have any auditing tools already installed, its difficult to identify what happened in past.

    Good luck
    LVL 18

    Author Closing Comment

    we are looking to better tools to track the event

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    Granting full access permission allows users to access mailboxes present in their database. By giving full access permission one can open and read the content of any mailbox but cannot send emails from that mailbox.
    "Migrate" an SMTP relay receive connector to a new server using info from an old server.
    To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now