1

I have an issue with the disappearance of emails, from the particular mailbox. I have one mailbox and it has a security group on it.

Emails disappear when it is being sent from internal users usually. Not really sure if it happened with external users.

In the security group, only 2 members have the possibility to delete the emails and those 2 members are actually directly connected to the mailbox.

In transaction logs I do see that email is being sent to this mailbox and one user claimed that they saw the actual email come and disappear immediately.

In deleted emails there is nothing and nothing can be recovered. This is also empty. I guess if it was deleted by the user, it should be available for recovery, as retention is set to 30 days.

Exchange is version 15.1 ‎(Build 2308.8)‎ - but it happened on prior versions. Here is the prior post to this issue: Why mails sent internally, disappear upon arrival?

Any advice on what I'm looking for?

Hemanth Kumar
  • 253
  • 5
Pathfinder
  • 31
  • 6
  • 1
    **I have one mailbox and it has a security group on it.** - What do you mean by that? Do you mean that a security group has delegated access to the mailbox? Have you checked for any rules that might be deleting the email? – joeqwerty Jun 03 '22 at 13:35
  • Correct, Security group have delegated access to the mailbox. Yes, checked on rules, but there is nothing I saw that have anything related which can trigger such mail deletion. – Pathfinder Jun 06 '22 at 12:22

1 Answers1

0

Does the mailbox give the full access permission to another mailbox? If in this case, please check if emails in the other mailbox’s junk folder. You can also use mailbox audit logging. https://practical365.com/tracking-mailbox-owner-deletes-using-mailbox-audit-logging/

Aaron
  • 359
  • 4
  • Is there any hidden rule in outlook client? Run below command to check it. Get-InboxRule -Mailbox user@contoso.com. Here's a similar thread for you. https://community.spiceworks.com/topic/2180030-hidden-rules – Aaron Jun 09 '22 at 08:30
  • Hi, is there any update? – Aaron Jun 15 '22 at 09:38