I look after the IT infrastructure for a small business. Approx 50 users. We use Office 365.
The owner is a bit of a paranoid control freak, and often becomes perturbed at pretty minor issues. The most recent one is read receipts being received when no one should be able to access the mailbox. AD is not integrated, and users do not have access to their office 365 outlook account credentials.
Most recent ones have been "was deleted without being read" receipts, with a timestamp shortly after midnight. The user in question has no remote access, and so could not have deleted the message at that time. Time zones are all set correctly, and there is no archiving in place.
Any ideas on how I can run some auditing, check some logs and somehow determine the exact event that fired this not read receipt?