Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have several users using a shared account and when messages in that account's in box have been processed they are drag and dropped into a public folder. Is there a way to determine who dropped a mail item in an Exchange 2003 public folder, so that we can have some accountability?

I suspect this can't be done natively in Exchange, so if there is a scripted solution to this I'd be very interested.

share|improve this question
up vote 2 down vote accepted

You may have luck examining the PR_CREATOR_NAME and PR_LAST_MODIFIER_NAME MAPI properties on the items. You can use the MDBVU32 utility to view these properties (background on doing that is available in KB253291).

On my test machine (a Customer's E2K3 server I had close at-hand), though, I found that items I copied from my "Inbox" folder to a public folder did not bear a modified PR_CREATOR_NAME or PR_LAST_MODIFIER name different from the original sender. Your mileage may vary.

share|improve this answer
Bingo. For me it's showing exactly what I'm after. Now I just need to figure out how to do this programmatically. It's not like you need them but here's your 250 points. – John Gardeniers Jul 6 '11 at 4:40
@John: The Outlook object model doesn't expose PR_CREATOR_NAME. Do some searches on using CDO and you should find some code samples to do what you're looking for. I need the rep-- Chopper3 is getting too close for comfort... >smile< – Evan Anderson Jul 6 '11 at 4:57

If it came be done, it would be located by going to Exchange System Manager > Expand Servers > Right click on your server and go to Properties > Diagnostics Logging tab > MSExchangeIS > Public Folders. I don't recall which one does it, either General or Access Control, maybe Views. Unfortunately it doesn't put it into a log file. It shows up in the application log.

share|improve this answer
I've had a really good play with those logging settings (as well as some others) but I can't find a setting which logs drag and drop. It was certainly worth a try though. – John Gardeniers Jun 28 '11 at 0:13

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.