Hello We are running Exchange 2007 SP1. As you all know, Exchange transaction logs are generated for any sort of user mailbox activity - moving messages, send/recv messages etc. Is there a way to find out which mailbox is causing transaction logging...for instance, if there are numerous logs being generated at 5am - which would be unusual for our environment - how can I find out which mailbox is causing these? Secondly, if I think that someone on my Exchange server is somehow sending an unusually large number of mails from Outlook, how can I find this out? I don't know their name, so I'm thinking that Message Tracking won't be useful here. I was thinking of using the Get-logonstatistics but not sure of the exact commandlet. Any ideas would be appreciated.