Is there a way to audit each action performed in an Exchange 2007 mailbox? In this particular case, a user, on many occasions, has complained that items from his contacts have dissapeared. I would like to be able to check an audit log when this happens, so I can tell him definitively what happened; whether he accidentally deleted it, dragged and dropped it, or if someone who has access to his contacts did.
I suspect that you're going to be disappointed.
Mailbox audit logging sounds exactly like what you're looking for, but it is an Exchange 2010 and newer feature. Exchange 2007 had mailbox access auditing but it's not granular enough to track deletions-- only access.