I have a very unusual issue where the owner of a shared mailbox states that every Friday morning between 0800 hrs and 0900 hrs, a few email messages that were received, read and moved from the "Inbox" to a folder in a PST file 7 days prior are then moved back to the Inbox and marked as "Not Read".At first I said; "This cant happen without human intervention. Someone is connecting to the shared mailbox andmanually moving these messages without telling you." However, after restricting access to only two people, myself and the owner, we watched and waited and sure enough every Friday, 3 to 5 messages are moved back into the Inbox and marked as "Not Read"Is there any debug orlogging I can run on the Exchange server that tracks who connects, when and which mail store they are connected to?We are running Microsoft Exchange Server 2007 on Windows Server 2003 64 bit edition with SP2.

You can audit the shared mailbox if you upgrade the exchange 2007 to sp2. Ex2007 sp2 has some nice features including Mailbox Access Auditing What's New in Exchange Server 2007 SP2 http://technet.microsoft.com/en-us/library/ee221150.aspx Understanding Mailbox Access Auditing with Exchange Server 2007 Service Pack 2 http://technet.microsoft.com/en-us/library/ee221156.aspxVinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

Hi,You can set the below process logging level as Maxmimum.MSExchangeIS\9000 Private\LogonsMSExchangeIS\9000 Private\Access ControlHow to Change Logging Levels for Exchange Processeshttp://technet.microsoft.com/en-us/library/bb201670.aspxAfter that, please check the event log.ThanksAllen