HiTheoritical question - if transaction logs were being created extremely quickly (either on Exchange 2003 or 2007) and I believe a user's Outlook was responsible for this (either because it was sending a large number of mails, repeatedly trying to send a large attachment, etc) is there anyway I can pinpoint this user using Exchange?-Cheers

Hi Yoshi,Basically all information stored in message tracking logs. You can do query in logs and find out who is the top most sender. Below articles help you to parser message tracking logs and gives you nice statistics. Meanwhile to stop generating logs quickly, you can enable circuler loging on the databases.Process Tracking Log tool for Exchange Server 2007http://msexchangeteam.com/archive/2008/02/07/448082.aspxAdvanced Exchange 2007 Transport Logs Troubleshooting using Log Parser - Part 1http://msexchangeteam.com/archive/2007/11/12/447515.aspxAdvanced Exchange 2007 Transport Logs Troubleshooting using Log Parser - Part 2http://msexchangeteam.com/archive/2007/11/28/447598.aspxTo find non-outlook clients in Exchange....More fun with Logparser and Exchange logshttp://msexchangeteam.com/archive/2007/09/12/446982.aspxExchange 2003 statistics with Logparserhttp://anewmessagehasarrived.blogspot.com/2008_03_01_archive.htmlAmit Tank | MVP - Exchange | MCITP:EMA MCSA:M | http://ExchangeShare.WordPress.com