Exchange 5.5 POP3 Logs

[lifegard2]

Does Exchange log connections to user's mailboxes via POP3? I have a user who most likely used a pop3 client to connect to his mailbox and inadvertently forgot to "Leave mail on server". Now his exchange/outlook mailbox is empty. I'd like to try and find the log entries, assuming they exist, that show when he connected via POP3, and if he downloaded messages, and if they were then subsequently deleted from the server. Am I up a creek or can this be done? Thanks!!

 

[Marcs41]

An exch server can log that with Advanced Logging (if the POP3 was on the server), but by default all that is turned off because of diskspace usage, so if you did not turn it on, or did no message tracking, you won't have it.
BTW, you should not leave your users be able to reconfigure things, that avoids trouble later. Now, they have no reason to complain.
If the answer is here, mark it, others can benefit from it too.
Free Tip: The F1 Key does NOT destroy your PC!

 

[lifegard2]

1. Where do I look to see if POP3 logging is enabled? I have most of the logging for Exchange turned on already.

2. Assuming logging is turned on, where are the logs stored? Are they just logged in the event log or do the logs go somewhere else in the directory structure?