Exchange 2007 email tracking

KMDComp
KMDComp used Ask the Experts™
on
We have exchange 2007 running on 2008 SBS and I need to find out what happened to an email.

A user read the email on her android phone, it was a response to a question she had sent to an outside address.  It doesn't show up in outlook or the phone or in deleted emails.  

It does show up in the exchange logs though, so I know the user isn't mistaken when she says she had the email, but I won't rule out user error as far as the ultimate fate of the message goes.  I have the message ID as well as the timestamp which the user verified as accurate.    

How can I get more info about this email from exchange?  Is there a way to find out where/how it was removed from that users account or where it may have been moved to?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Awarded 2009
Top Expert 2010
Commented:
I don't think Message Tracking is going to help you here.

There is a good article here that explains message tracking and how to use it: http://www.msexchange.org/tutorials/exchange-2007-message-tracking-part1.html

It's a 2 part article so be sure to follow the link at the end for the second part.
Commented:
Is it possible she may have deleted it permanently from deleted items?  If so, try recovering from deleted items.
Commented:
replay the logs and try to resotre it .using backup restore on Recovery storage group.
if found merge it with actaull mailbox .

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial