Mailbox Size & No of Items 1

[paulyr]

We have an NT4 network, Exchange 5.5 and Win98 clients. We suspect a recently suspended employee of sending malicious email. A search of all Outlook folders on her pc shows around 1,000 messages but on the server her mailbox is shown to be 80,395K in size with 7,013 items. Do these 6,000 other items exist and if so where?

I'm a newbie Exchange admin - you can probably tell.

Thanks

 

[KeyTech]

check that she hasn't got a personal file that is storing all these messages, do a search for *.pst on her PC and see what comes up, you will get one maybe two .pst files, so check the size of them and if they are quite large then there is your answer...just import the .pst file to Outlook (even on to your PC across the network) and you can see all the emails.

If this isint the case, and you have searched everywhere, go to the Server, and go to x:\Exchsrvr\imcdata\out\Archive\ (where 'x' is the dirve that Exchange is on, usually E:\ or F:\ or something) and in here are a list of all emails that were sent out...they are in a no format, ie, the file name might be "Fy5869" with no extension, so open them in notepad and you can read the text element of the mail, including who it was sent to,what time, and what it said.
good hunting!!!!
Jay~

"I have to think of a funny footer to
put in here!!!???"

~KeyTech

 

[Steve1445]

Just as a side note, consider limting mailbox sizes. With users that hang onto every note, message and whatnot, you will soon run into trouble at the server. Your information store will grow leaps and bounds. You can limit the size of mailboxes in the user's profile in Exchange, of course you will have to come up with a fair size. I keep mine around 13K for a warning to the user to start cleaning out the junk and 16K to cut 'em off until they do some soul searching and get rid of all those special jpgs or bmps.
I've seen the differnce between what Exchange says is the mailbox size and what is on the workstation. This is especially true if you do a Exmerge. If you do the exmerge you will create a complete *.pst that you can open and browse through. If I remember right I think Exmerge is available at the MS site, if not drop me a line and I will send you a copy.

 

[Guest_imported]

I've had the same thing happen and found that the user's journal was turned on. Turn the journal off in Outlook (Tools, Options, Journal button and uncheck all items). The easiest way to get rid of the journal items is to archive them. If they used their calendar a lot, you might want to archive that also. Every item in calendar and journal counts as one item and adds up in the sizes.