We have a Generic mailbox , which is being used by around 10 users and they USE VDI machines to access the mailbox in Outlook.
Outlook is constantly deleting emails from the mailbox and I am not able to identify exact user as they are using it with Generic Mailbox Username/password, so even in the Audit Logs it shows the Mailbox Username and even the IP is also a problem as its giving the Gateway IP ,because its a VDI machine.
They are escalating this as they are using the mailbox for Customer Service where in ,email comes to this mailbox and it is forwarded to a SAP server for creation of requests.
Any help would be appreciated, as I am not able to identity from whose outlook its happening .