Hi all,
A user sent me a message saying "all my messages prior to this afternoon have
disappeared"
I logged in as the user , went to the inbox, went to "recover deleted items"
and all the messages showed deleted today at 3:45pm,
I easily recovered them, and informed the user that either she, or someone with
access to the mailbox, deleted the messages.
Aside from me seeing them there, is there a log, or eventID I can show the
manager that these messages were deleted ? and they didn't just "disappear"