We have exchange 2007 running on 2008 SBS and I need to find out what happened to an email.
A user read the email on her android phone, it was a response to a question she had sent to an outside address. It doesn't show up in outlook or the phone or in deleted emails.
It does show up in the exchange logs though, so I know the user isn't mistaken when she says she had the email, but I won't rule out user error as far as the ultimate fate of the message goes. I have the message ID as well as the timestamp which the user verified as accurate.
How can I get more info about this email from exchange? Is there a way to find out where/how it was removed from that users account or where it may have been moved to?