question

ImthyasMahammad-3072 avatar image
0 Votes"
ImthyasMahammad-3072 asked ImthyasMahammad-3072 answered

Outlook deleting emails automatically

We have a Generic mailbox , which is being used by around 10 users and they USE VDI machines to access the mailbox in Outlook.
Outlook is constantly deleting emails from the mailbox and I am not able to identify exact user as they are using it with Generic Mailbox Username/password, so even in the Audit Logs it shows the Mailbox Username and even the IP is also a problem as its giving the Gateway IP ,because its a VDI machine.

They are escalating this as they are using the mailbox for Customer Service where in ,email comes to this mailbox and it is forwarded to a SAP server for creation of requests.

Any help would be appreciated, as I am not able to identity from whose outlook its happening .

office-exchange-server-administrationoffice-outlook-itpro
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AndyDavid avatar image
1 Vote"
AndyDavid answered YukiSun-MSFT commented

Remove the ability to access it with a generic username and password. There is no way to identify who is deleting it if you allow that.
In other words, disable the shared mailbox AD account.

Then, delegate access ( full access and send as if needed) to the users who need access:
https://docs.microsoft.com/en-us/exchange/recipients/mailbox-permissions?view=exchserver-2019

Then ensure auditing is enabled for all actions for that mailbox.

https://docs.microsoft.com/en-us/exchange/policy-and-compliance/mailbox-audit-logging/enable-or-disable?view=exchserver-2019#configure-mailbox-audit-logging-settings-for-administrator-delegate-and-owner-access

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @ImthyasMahammad-3072

Agree with Andy that you can assign full access and send as permission to the users so that they can access the shared mailbox using their own credentials. In this way, you would be able to track who deletes a message after properly configuring the mailbox audit logging.

By the way, if you found any of the replies provided helpful, you can accept it as answer so that others who have a similar question can benefit from your thread. If you still have further concerns on this, feel free to post back.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·
imamitsingh avatar image
1 Vote"
imamitsingh answered

Do you access email on any other devices?

I've had users report similar issues to me in the past and what they were seeing is Outlook resyncing with the server when they open it. They saw messages they had deleted/moved on other devices - cell phone, home computer, etc. - and their office Outlook just updating.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ImthyasMahammad-3072 avatar image
0 Votes"
ImthyasMahammad-3072 answered

Sorry for the delay, as per the suggestion, i have converted the mailbox to Shared and gave the users access.
Lets see, if they come back.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.