Exchange 2010 : logging Public Folder mail deletion
Posted on 2014-01-21
I have to monitor message deletion inside a PF (find who deleted mesasges and at what time to be precise).
I found the Get-PublicFolderItemStatistics PS command but I don't know how to identify the user concerned for modification. It looks like that we can only see existant messages and not deleted ones.
I tried to activate PF logging in Exchange EMC (server config -> Properties -> Diagnostics Logging tab -> Services -> MSExchangeIS -> Public) but I do not know wich one to choose, maybe "Access Control", General and Views, but I do not know what does it is exactly...
I don't know where to search...
Thank you in advance for your help, best regards,