Normally I would write off any reports of 'disappearing mails' as user error as what happens in 99% of these cases. However, there have been reports of this from several mailboxes (some of which are not shared). A business answer wants a definitive answer of why this is happening, and I was wondering how much information I would get from enabling Mailbox auditing. Is it possible to view information of which account moved or deleted certain mails (including the mailboxes owner)? On previous versions of Exchange all you could see was if the mailbox was accessed or not. Secondly, this server is a VMWare box and already performing poorly. Is enabling mailbox auditing likely to cause it to take a major performance hit? The Exchange 2007 server is on SP2. Thanks.

Many thanks for this. Regarding 'mobile devices' causing items to disappear. This doesn't include Blackberries does it? I have experienced this with Windows mobiles and Iphones, but the only mobiles that this client uses are a handful of Blackberries. Secondly, do you know if the monitoring options in Exchange 2010 mailbox auditings are much improved? They are planning to upgrade to this system. Can you , for example, see who deleted or moved individual messages?