Hey All - We have a handful of resource mailboxes that are shared within a department. We have an issue where emails are being deleted from the resource mailbox and the department heads would like to know who did it. I can track the message up to delivery with System Manager (Exchange 2003), however I don't know how to go about tracking a message's life after its been delivered. Any insight is greatly appreciated. Wade Rocco
I'm not sure if this is of any help but if your Exchange server have any retention set ON higher than 1 day for deleted items, you could access the suspected mailbox and have a look in deleted items retention folder. Using outlook select deleted items folder and go to Actions menu, select Recover Deleted Items. Somewhere next to items you can recover you can also see the deletion timestamp, received timestamp, subject of msg and sender address Darek
