I have an internal issue where I need emails sent from one sender to a particlular recipient within our company. The emails span about 6 months. We have Exchange 2003. I am using the message tracking center to locate the messages but I am having trouble getting the details I need like the message body. I am not sure if I am using the message tracking center correctly. When it finds a message and I click on the message it searches for a long time but does not come up with anymore details. Is there a better tool or do I have to do this with certain services stopped for quicker responses. Thanks very much in advance.

You can only search as far back as you have message tracking logs. If you're only retaining logs for 2 weeks (I believe that's the default setting), then you can only search back 2 weeks. Message tracking logs do not contain any information about what was in the body of the email, only timestamp, sender, recipeint, subject, and message size.

Hi, Yes, agree with mjolinor, you cannot search body of email. And if you want to get more information, for example, client IP,server IP, you can directly read the tracking logs which located in C:\Program files\Exchsrvr\EXCHANGE.LOG. If you want to search message body next time, you can choose Archive all messages sent or received by mailboxes on this store check box of mailbox store's properties.The account that is being used as the journal recipient.Frank Wang

Thank you for your response. It is good to know that I am using the message tracking center correctly and do not have any other option in this case to get the body of the message.

Thank you for your response. The exchange.log did not include any more detail about the message body but your suggestion on choosing to archive messages on this store is very helpful moving forward.