A user is stating that his manager updated his calender with an appointment at a specific time, however the user states that they printed off the calender at a specific time, and the calender item was not listed. I suppose we can dig for a printer item in event logs, but does exchange provide information on calender items so that we can provide the "caddie" information requested?

Thinking about this issue has come up with two ideas. One, log into the users calendar and check the properties. This will at least show the last modified date on the appointment. Problem with this is, this will not prove what date the appointment was created, only show when the last change was made.The other option is we could do a restore to the calendar to see if the item was entered in before the nightly backup flew.Any other options?