I am trying to track down a message in Exchange 2007. The issue here is that on multiple occasions my users have seen a message be delivered to their inbox and then before they can open that message it is removed from their inbox. I have done searches of their mailbox, looked at rules etc, and I'm not sure where they go. Searches turn up nothing, I can't find them in deleteds and there are no rules for this particular user. I am now trying to get more details from the server. I am focusing on one message in particular that I know the exact time and subject on. In Message Tracking I was able to find it and see the Receive, Deliver, Submit entries. This tells me that the server delivered the message to the particular mailbox, but not what happened after that. Is there a tool or method that anyone can recommend that will assist me in 1) finding the final resting place and 2) determining what's causing it to get deleted/moved? I should mention that my other thought was mobile devices but so far affected users have used everything from iphones to androids and it doesn't appear to make a difference.

Is there anything under the recipient status filed for the deliver event in message tracking? Did you search the entire mailbox? Check the Dumpster ( recover deleted items) under each folder? If this is not Outlook 2010, set the DumpsterAlwaysOn reg key to check the dumpster under each folder. http://technet.microsoft.com/en-us/library/aa997155(EXCHG.80).aspx

1. If the message has been delivered to the mailbox then exch has pretty much done it's job as you see the deliver. 2. I would, pick one user and try to recreate the problem. 3. Things I would test is, removing mobile access, just in case there are some rules on their handheld. 4. When disabled, test/monitor the situation, 5. Investigate if it's some or all users, do they all have mobile devices 6. Check the dumpster - http://support.microsoft.com/kb/178630 - Search the reocevered items on the Inbox directly and also the deleted items recover.Sukh