Thanks, will give this a try if nothing solid is forthcoming from the IronPort
On 23 July 2010 14:35, Rob Sargent <rbsr...@gmail.com> wrote: > Assuming you still have the Tracking Logs for the period in question, then > download and install the 30-day trial of Quest MessageStats ( > www.quest.com/messagestats). In the admin console you can identify > certain mailboxes on which you want detailed information (auditing tab), and > then set up a gathering task for the tracking logs on the servers. Wait for > data to be imported, then from the reports console run the Mailbox Sent > Audits report. > > Rob > On Fri, Jul 23, 2010 at 7:59 AM, James Rankin <kz2...@googlemail.com>wrote: > >> Greetings Exchange gurus >> >> What's the easiest way to view all messages that were sent by a particular >> user on a particular day in the past week? I need this for some >> cloak-and-dagger investigative purposes - I suppose I could just grant >> myself permissions to the user's mailbox and forward myself all their Sent >> Items, but a) would they be able to tell I'd done this? and b) I'm assuming >> this wouldn't cover any stuff they may have permanently deleted? >> >> I presume there must be other ways to achieve this - I apologise for my >> lack of Exchange knowledge, I am not an Exchange bod by any stretch of the >> imagination. >> >> TIA, >> >> >> >> JRR >> >> -- >> "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into >> the machine wrong figures, will the right answers come out?' I am not able >> rightly to apprehend the kind of confusion of ideas that could provoke such >> a question." >> >> > -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question."
