Hi, there: Due to security reason, we need to find outthe event related withmailboxbeing purged(when, who). How can I see from event log the event related with mailbox purge(manually or system maintenance)? What setting do I need to put on E2k3? Environment: E2k3SP2+W2k3 Thanks in advance

Hello, When mailbox purges during system maintenance it logs below information in event log, but I am not awareabout the event whensomebody purge mailbox manually. I would say try by increasing diagnostic logging and test the scenario for manual purge. Event Type:InformationEvent Source:MSExchangeIS Mailbox StoreEvent Category:General Event ID:9532User:N/AComputer:ServerNameDescription:The user account for 'UserName' does not exist in the directory or is not enabled for Exchange mail. This mailbox has been removed from mailbox store 'StorageGroup/DatabaseName'.

Hi, Amit: Thanks for the answer. My focus is trying to find who and when ever did the manual mailbox purge. I did find some mbx purge by system maintenance. as you suggest, I increase the logging level under "MSExchangeIS-->Mailbox->Access" to "high" and did a test, no event logged, by the way I use Chinese version of E2k3, so the above diagnostic logging is just translation of Chinese, but I believe you know what it means. I'll still try to find out which diagnostic logging need to be set in order to achieve my goal if I have time, if you find the exact setting, please let meknow.