Sorry I meant more like an Activity log as it seems someone else has sent a certain ‘confidential’ email on. The user themselves denies doing so and we need a way of finding out when it was done?

Do you have message tracking enabled on your server?
Do you have journaling turned on?
Have you checked their sent file?
Have you checked their trash?
Have you restored their mail file from tape?
What have you already done?

If sent from the mail file, and you see the sent message, does it say sent by?

We have checked trash and sent. The document was emailed to the user the same day it has been supposedly accessed, printed and deleted by ‘?someone else?’. Just wondering if the mail file kept a log of what has been done inside of the mail box. Unfortunately our company has nothing on the servers which logs this activity.

Printer: Do you use a print server, all activity would be logged and you could locate who printed it that way.

Notes: Right Click the mail file – Application Properties – Choose the i tab (second one) – select “User Detail” this may tell you who was in the file, but not what was read.