Hi Guys, I would like to ask if there's a log or any information that can check on the exchange server 2003 and exchange server 2007 if there's a restore mailbox occur on a particular exchange server 2003/2007? Is this can be audit? Let say for example how would I know if the admin guy perform any restore mailbox in a month? is there any log or auditing we can set so that we can track it? Thanks!

Hi, You could search your event log whose source is “NTbackup” and check the restore data. Per my knowledge, there is no audit option for this operation. Thanks, Elvis