> This appears to be an action by IMail rather than an Windows
> NT problem as the users who were logged in at the time don't
> seem to have been effected and as I have stated the deletion
> is in no way random.
It sounds like someone typed "RD IMAIL /S" or "DELTREE C:\IMAIL" or took the icon for
the IMail folder and dumped it into the recycle bin.
If that happened, it would delete whatever files it could, but any files that were
opened or locked or whatever could not be deleted.
Unfortunately, by default NT has terrible auditing, so unless you took precautions
ahead of time, you won't be able to tell who did what.
-Scott
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
