Finding deleted mailbox via MFCMAPI and located source for removed emails

Dec 3, 2014 at 9:22 PM
Edited Dec 3, 2014 at 9:26 PM
Hi There,

I am having 2 separate issues that I dont think are related but that i need assistance with.

A user is complaining that some of her sent items are no longer in her sent folder. I found these emails under the purged items in MFCMAPI. I was wondering how I can tell who/what deleted these items? was it done via an autoarchive job or, manual?

Additionally, a users mailbox disappeared from an AD object. The AD Object is there but the mailbox is no longer in exchange. i have a 7 year retention policy on all mailboxes, how can i find this mailbox data via MFCMapi. this mailbox belongs to a user who is no longer with the company, his account was disabled. The email was not disconnected in exchange.

Thank you.