We are using Exchange 2007 SP2 in our organisation and we have 3 mail box servers with public foders. We have a replication setup between these public folders. We are using these folders to share mails between the slow link sites. In one of the public folder, all items are getting regularly cleaned up (deleted) and the owners deny the responsability. Each time I have to restore the itesm from the backup and so far I have done it 3 times. Can any one suggest a way to audit the exchange 2007 public folder deletions... My searches I can see only ways to audit mail box activities.

Try this, it should work for 2007 as well: http://support.microsoft.com/kb/884863 Set the PF General Diags to at least medium and see if Event ID 9682 is fired when a pf is deleted.

Hi MOQ, For mail enable public floder, there is a Folder Access Auditing configuration maybe could log the action. Access Auditing by Event Log Level For events that represent access by one user to another user's mailbox, the following general guidelines describe which events are logged at each diagnostic logging level: - At logging level zero (0), nothing is logged. - At logging level one (1), only actions for which the acting user invoked administrative privileges are logged. - At logging level two (2) and four (4) only access from one mailbox-enabled user to another mailbox is logged. - At logging level three (3) and five (5) access from any user to any mailbox is logged. You could refer to below: http://technet.microsoft.com/en-us/library/ee221156(EXCHG.80).aspx Regards! gavin

Thanks , I neabled the event audit and now it's loggin a lot a events. It's bit hard to find the information we are looking for since its reporting everything. Any how I am waiting for the next incident will search the logs to see how it's happening. Appreciate the help and thanks for the informations.

Our case the folder is not deleted only the items are disappearing.

For any one getting in the same issue. The issue with mails getting disappear from public folder was from the age limit settings on the public folder settings. Exchange 2007 sp2 seems to have an issue with age limit settings. If you select the Age limit for replicas (days) option instead of the Use database age defaults option for the local replica age, the age limit works as expected. However, after you select the Age limit for replicas option, you cannot cancel the selection. This remains true even if you later try to select the Use database age defaults option. http://kbalertz.com/969230/function-public-folder-expected-Exchange-Server-environment.aspx