Solved

deleted evidence exchange 2010

Posted on 2014-07-24
4
264 Views
Last Modified: 2014-07-30
Is there anyway in exchange 2010 to get a report of what time

A.. what time emails were deleted by a user and subsequently moved to the deleted items folder

B.. emptied from a deleted items folder into the recover deleted items folder

C.. the date and time a user purged emails from the recover deleted items folder so they were no longer recoverable
0
Comment
Question by:pma111
  • 2
4 Comments
 
LVL 19

Assisted Solution

by:Kash
Kash earned 250 total points
ID: 40216587
I am not sure without Auditing it is quite possible though. You need to enable mailbox auditing >>> http://technet.microsoft.com/en-gb/library/ff459232%28v=exchg.141%29.aspx
0
 
LVL 12

Accepted Solution

by:
David Paris Vicente earned 250 total points
ID: 40216651
Hi,

By default Mailbox Owners are not audit because this will generate a lot of data.

If you enable audit logging for a user you can access to the mailbox audit log by PowerShell or through ECP.

For auditing a mailbox you have to enable it through Powershell
Ex: Set-Mailbox <Username> -AuditEnabled $true
then
Set-Mailbox <Username> -AuditOwner update,move,MoveToDeletedItems,SoftDelete,HardDelete

For reference you can check here Set-Mailbox


Then you can access to the audit by the ways I mention above.

Hope this helps.
Regards
0
 
LVL 3

Author Comment

by:pma111
ID: 40216673
Is there a command to see if mailbox auditing is enabled
0
 
LVL 12

Expert Comment

by:David Paris Vicente
ID: 40216760
Yes.
get-mailbox <username> | fl *audit*

Open in new window

0

Featured Post

Don't lose your head updating email signatures!

Do your end users still have the wrong email signature? Do email signature updates bore you or fill you with a sense of dread? You can make this a whole lot easier on yourself by trusting an Exclaimer email signature management solution. Over 50 million users do...so should you!

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Junk folder 23 112
cached or not 5 47
Share Outlook Calendar color disappear in outlook 2016 3 20
how to open abcd.txt.orig file? 10 7
We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
The view will learn how to download and install SIMTOOLS and FORMLIST into Excel, how to use SIMTOOLS to generate a Monte Carlo simulation of 30 sales calls, and how to calculate the conditional probability based on the results of the Monte Carlo …
The viewer will learn how to use a discrete random variable to simulate the return on an investment over a period of years, create a Monte Carlo simulation using the discrete random variable, and create a graph to represent the possible returns over…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now