We have a shared mailbox which is missing items prior to s specified date. It is our assumption that a user was connected to the mailbox and inadvertantly kicked of an archive. Is it possible to determine when a specific mailbox was last archived and if possible by either whom or from what workstation. PS. This is Exchange 2003 Thanks Paul

Hi, What is you archiving solution ? how is it setup? thanks ThiyaguThiyagu | MCTS/MCITP - Exchange 2007 | MCSE 2003[Messaging] | http://www.myExchangeWorld.com. This posting is provided "AS IS" with no warranties, and confers no rights.

Don't have one. We think someone locally initiated an archiving of the mailbox.

One thing you can do is, 1. Retrieve who all had access to the mailbox in question. ( you can check mailbox permission in Exch as well as outlook) 2. Check those users PCs, for the archive file. Thiyagu | MCTS/MCITP - Exchange 2007 | MCSE 2003[Messaging] | http://www.myExchangeWorld.com. This posting is provided "AS IS" with no warranties, and confers no rights.

Hi Paul if you already made audit to the mailboxes it will be ok to find the event you search for in the event viewer but if you don't i don't think that you can get it . for information about Auditing Mailboxes and the how to you can check this link : http://www.msexchange.org/tutorials/Auditing-Mailbox-Access-Exchange-System-Manager-Event-Viewer.html regards |Ahmed Tarek | Please vote helpful or mark as answer if it's answered your question, this help us follow up the question status.

Hi PJGLICK1, In your scenario, checking log of shared mailbox is most effective, otherwise you have to manually check the user whom shared with. If you have active the access log of the mailbox, open the Event View -> application to filter the date and find who has access the mailbox. How to active log of mailbox: 1. Start the Exchange Server Administrator program. 2. Select the server where the mailboxes are homed. 3. Click Properties on the File menu. 4. Select the Diagnostics Logging tab. 5. In the Services pane, expand MSExchangeIS, and then select Private. 6. In the Category pane, click Logons, and then change the Logging level to Maximum. Refer to : http://support.microsoft.com/kb/260835