Hello , I would like to know if it's posible in exchange 2003 server to find out the ip from witch a mail was sent from our organization . The situation is this : someone in our company complainedthat from her mail account a mail was sent , and it wasn't by her . She doesn't have any mail client configured on her PC , so the only way anyone could do that from her PC would be through outlook Web Acces . Is there any way to find out the IP of the PC the mail was sent from (In Message Tracking Center there is no IP). Thank you .

Yes message tracking doesn't show client ip. But it is sent using OWA, so you may get the client ip from W3C extended logging if it is enabled. You may use notepad or Log Parser to scan the IIS logs and look for the access during the time when mail sent. Using the Logparser Utility to Analyze Exchange/IIS Logs http://www.msexchange.org/tutorials/Using-Logparser-Utility-Analyze-ExchangeIIS-Logs.htmlAmit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com