Hi, this morning one of our users has sent lot of mails to other users. On his Outlook I didn't see those mails but when i'm gonna see the "troubleshooting assistant" on my Exchange server I can see that so many mails have been sent from this user. EVENT ID : SUBMIT Source : STOREDRIVE SourceDATA : MDB:5aa3529 Recipients : Empty I don't know why my server has sent those mails by itself without any actions from user. I'm sorry my english isn't perfect but I think that I'll get more answers here.

Do they look like duplicates? It's possible there could've been some looping with his Outlook outbox and the Exchange store driver. I would ask the user if he was sending any emails, large emails, if they appeared to be stuck in his outbox etc.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Hi Jamestechman, firstly I would like to thank you for your answer. I'm going to try to explain you this better. There were lot of very old mails (about 6 months old..). In the afternoon another user had the same problem, this time he didn't send but he received lot of mails, mostly mails of type "acknowledgement of receipt" (don't know if we say like that in english) as if those mails haven't been never read... To resume, users send or receive mails of type "acknowledgement of receipt" wich explain that messages have been read or not read but several months later. Thanks a lot.