Perfect (Q183674). Just what I was looking for.
Thanks!
Robert
-----Original Message-----
From: Soysal, Serdar [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 23, 2001 10:21 AM
To: Exchange Discussions
Subject: RE: Mailbox Creation/Deletion
You would have proof if the Diagnostics Logging for Security is set to
maximum on your Directory Service on all of your Exchange Servers. The
following article describes in detail how you can determine which Exchange
Server the change was made at and details on setting up diagnostics logging.
Q183674
This second article shows how you can export information about deleted
objects from the Exchange Directory. It may be useful if you catch the
problem fast enough. The article only describes how you can export certain
fields, but I'm sure you can add the DSN-Signature field to the export
header and get that information out as well.
Q239639
You probably won't be able to prove this one incident, but if you have a
liar admin, you may want to keep an eye on this person. Good luck.
S./
PS: Michele! You crack me up.
-----Original Message-----
From: McCready, Robert [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 23, 2001 9:43 AM
To: Exchange Discussions
Subject: RE: Mailbox Creation/Deletion
I'm 99% sure who did it, but they won't admit to it. I need proof.
-----Original Message-----
From: Andy David [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 23, 2001 9:47 AM
To: Exchange Discussions
Subject: RE: Mailbox Creation/Deletion
How many people have the ability to this?
Why not just ask who did it?
Andy
-----Original Message-----
From: McCready, Robert [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 23, 2001 9:39 AM
To: Exchange Discussions
Subject: Mailbox Creation/Deletion
We have a user who lost all of the mail in his mailbox, including personal
folders/contacts, etc. I believe what
happened is that one of the Exchange Admins accidentally deleted that
mailbox and then recreated it. I did open
the users mailbox, and find that it was just created Tuesday of this week.
Is there any way to find out who created
this mailbox or deleted the old one? I checked EVENTVWR, didn't see
anything.
Thanks!
Robert
*** CONFIDENTIALITY NOTICE ***
This electronic mail message and any attachments to this electronic mail
message contain confidential information belonging to the originator, and
may be attorney client privileged or constitute inside information. It is
intended only for the use of the individual(s) listed as the recipient(s).
If you are not one of the intended recipient(s), you are hereby notified
that any disclosure, copying, distribution, or the taking of any action in
reliance on the contents of the electronically mailed information is
strictly prohibited. If you have received this electronic mail message in
error, please forward the electronic mail message to [EMAIL PROTECTED] and
then remove all traces of the electronic mail message from your system.
*** The Dayton Power & Light Company. ***
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
