[ExchangeList] Re: How to check who has deleted email.

If you didn’t move it from the dumpster; the PR_Last_modifiername may have revealed via mfcmapi. However; there is no item level auditing in general.

Hi,

We have Exchange 2007. We have a mailbox on which few users have access. They have send on behalf and other access on this mailbox. Somehow one of the user has deleted email from that mailbox. We have recovered that email from Recover deleted items. But I want to know who has deleted this mail. These users access this mailbox by adding this mailbox with their own mailbox in outlook. Is there any way by which we can find the user id who has deleted that email.

Regards,

Amit Kapoor

DISCLAIMER:
This e-mail and any attachments to it may contain confidential and proprietary material and is solely for the use of the intended recipient. Any review, use, disclosure, distribution or copying of this transmittal is prohibited except by or on behalf of the intended recipient. If you have received this transmittal in error, please notify the sender and destroy this e-mail and any attachments and all copies, whether electronic or printed.