I need to find out if any e-mail attachments sent through our Exchange server have had a specific file format. Is there a way in Exchange 2007 to search if there have been any e-mails sent through our server that contained an attachment with a specific file extension? I've looked at the Message Tracking tool and that doesn't seem to be helpful.

Message tracking is just a tool that logs what Exchange does with the message. It knows nothing of the content. You will have to use export-mailbox with filters, or one of the numerous third party tools for eDiscovery to find the content. http://technet.microsoft.com/en-us/library/bb266964(v=exchg.80).aspx Simon. Simon Butler, Exchange MVP Blog | Exchange Resources | In the UK? Hire Me.

I've found the export command I believe is supposed to work for me: get-mailbox | export-mailbox -attachmentfilenames "*.[file extension]" -targetmailbox [my user name] -targetfolder '[folder name]' but now I get another error "Error occurred in the step: Creating target folder in the target mailbox. An unknown error has occurred" It sounds like it is trying to create my folder I'm trying to export to but that folder has already been created. Then I tried asking it to export to another folder name, for one I hadn't created yet, and I still get the same error. Any ideas where I may be going wrong?

I've discovered that error comes from not giving permissions to the user I run the command with for each mailbox. Doing the tedious task of assigning full access to all mailboxes individually then will update with status.

I also wouldn't recommend using your own mailbox for this. Create a special mailbox for this kind of export, so that you can drop the mailbox at the end of the process. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources | In the UK? Hire Me.