One of our exchange users are having there messages deleted randomly. When he has gone back to look for these emails they have disappeared and appeared in the usual recover deleted items box.There is no pattern to the items deleted, just a random selection or up to 100. No rules have been added since this started happening. we have ruled out any anti virus/spam software.The mail box size is 2gb, but limits are not set from what we can see.Exchange Database size is 3gbRunning Exchange 2003 sp2 on Server 2003 SBS sp1I hope i havnt left anything out.Any help appreciated.

Have you ruled out anyone else having access to this mailbox, either as a delegate or full mailbox access?

No one has access to the mailbox, password was changed a while ago to rule that out. No one has delegate or full mailbox rightsSorry, should have mentioned that.

No worries - I had to ask. It's difficult to diagnose these remotely. Does the stuff disappear when the account is not logged into via Outlook? If so, that would point more to a process running on the machine. Perhaps get the person to use a different machine for a while. Or get them to use OWA for the day and see what happens, etc. I can't say I've heard of Exchange randomly deleting emails....

Here is something you can try. Use MFCMAPI if are familiar, if not, download from Microsoft site. Open MFCMAPI goto the deleted items foler and select the deleted message. Look at the properties. Look for property called PR_MODIFIER_SID then convert this SID to the user in your environment, this willbe the account used todeleted it.

What a cool idea Anil. I hope the original poster reports back on that one.

We have had this problem occur with one of our users today with the added behaviour that they're meetings are being cancelled at random as well. I have sat infront of the computer and watched emails move into the deleted items folder with no interactionwith PC. I moved emails back into the inbox only to see them move back again with a few minutes. I've checked through their delegates and there is no one listed with higher than reviewer. There is nothing suspicous ontheir mailbox access rights either.I have run anti-virus and anti-spyware scans on the PC and there are no unusual processes running. There are no rules being applied to his inbox that delete items. I have launched outlook 2003 with the /cleanrules switch. I have re-profiled his outlook and I have also set him up on a completelynew workstation and the problem still persists. Any ideas???