My Boss wants me to find out something. There are two admin accounts on an SBS 2011 server we have. One of the admin's "wasn't me" !! un selected a few check boxes when doing a properties of a public folder in exchange, and it caused some email to get deleted faster than it should have. He believes there should be an "audit trail" in the OS somewhere that would say who, and when said person might have made a change. I can't find it anywhere, but that is not to see it's not there. Would anyone out there have any idea where I might look for that kind of thing in the logs?