Forum Discussion
Best way to find out what happened in a shared mailbox through the audit logs?
Hi everyone I have a case where someone claims several mails between Jan 1st and Febr 27th were not received into a specific shared mailbox. I checked message trace and there I can find all o...
Auditing isn't enabled by default for shared mailboxes, so you might not get any information from there. I'd suggest doing a mailbox search or eDiscovery content search for the missing messages (both of these accept a subject query).
Thanks Vasil. Mailbox search did the trick. They were effectively deleted but of course, nobody actually deleted them when you ask the people who have access to the shared mailbox :)
