Solved

Outlook 2010/Exchange 2013 - Deleted items emptied - How to determine who and how?

Posted on 2016-11-03
7
31 Views
Last Modified: 2016-11-04
Several users have access to this mailbox. So far I've checked that no-one else has "clear deleted items on exit" set.

But still deleted items are being cleared. How can I track this? Worth turning on auditing?
0
Comment
Question by:paulfoel
  • 3
  • 3
7 Comments
 
LVL 2

Accepted Solution

by:
Mikhail Sartaev earned 250 total points
ID: 41871987
Only if you enable mailbox audit.
By default it does not enable.
http://exchangeserverpro.com/using-exchange-server-2013-mailbox-audit-logging/
0
 

Author Comment

by:paulfoel
ID: 41871997
Enabled now.
0
 
LVL 2

Expert Comment

by:Mikhail Sartaev
ID: 41872022
Check article in preview post
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:paulfoel
ID: 41872225
So no way at all? User is moaning that their deleted items are getting emptied and also today items re-appeared in inbox - as if someone did "recover deleted items"

Apart from user error is this even possible? Corrupt profile or something?
0
 
LVL 2

Assisted Solution

by:Mikhail Sartaev
Mikhail Sartaev earned 250 total points
ID: 41872242
Did you enable audit for owner?
Post result of command:
Get-mailbox "yourmailbox" | fl *audit*
0
 

Author Comment

by:paulfoel
ID: 41872334
AuditEnabled     : True
AuditLogAgeLimit : 90.00:00:00
AuditAdmin       : {Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, FolderBind, SendAs, SendOnBehalf, Create}
AuditDelegate    : {Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, FolderBind, SendAs, SendOnBehalf, Create}
AuditOwner       : {Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, Create}
0
 
LVL 8

Assisted Solution

by:Kevin k
Kevin k earned 250 total points
ID: 41873920
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create a User Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Mailb…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now