Hazim, keep in mind that with Exchange and Outlook in MAPI client mode (i.e. not in POP3 or IMAP mode), all the user's mailbox data is stored on the server. There is one exception to this: is if the client is set to download mail to a PST file, in which case the admin would have to be opening the user's PST file and modifying the information there. A PST file can only be open in one place at a time, so this would have to be done when the client was not running Outlook. Greg Lara ---------------------------------------------------------------------------- --------------------------- This e-mail message may contain privileged, confidential and/or proprietary information intended only for the person(s) named. If you are not the intended recipient, please destroy this message, and any attachments, and notify the sender by return e-mail. If you are not the intended recipient(s), or the employee or agent responsible for delivering the message to the intended recipient(s), you are hereby notified that any dissemination, disclosure or copying of this communication is strictly prohibited. ---------------------------------------------------------------------------- --------------------------- _____ From: Hazem Mustafa [mailto:hazemmustafa@xxxxxxxxxxx] Sent: Tuesday, September 07, 2004 2:33 PM To: [ExchangeList] Subject: [exchangelist] RE: Sent/Received User's emails Amendment at t he S erver http://www.MSExchange.org/ Hi Raj, Are you referring to message and user's mailbox at the machine or at the server ? the user machine has gone its been formated and a new operating system has been installed on it, all our recourses are only the Exchange server 5.5 but not the client which was Ms Outlook office 2000, we also have a backup tape, this is why we want to know if its possible for changes to have taken place on that user's sent old email stored at the server itself ? the user claims that the email brought forward diferece from the one he sent and used to have at his machine, the question is if any one has done any changes on that email at the server where its stored ? how ? and can those changegs be traced or not ? Please advise "Periyasamy, Raj" <Raj.Periyasamy@xxxxxxxxxxxx> wrote: http://www.MSExchange.org/ Yes, it wil still show the exact modified date. The Modified date/time is always stamped in the message. By selecting the field to view you are just viewing what is already in the message. Same applies every other field. It is there, you just select what field you want see or hide. By deleting field, that data is not lost, but just hidden.