Exchange 2010 message events

Question

Hello to all, I need to do the following activities in Exchange 2010 for all mailboxes:   1- Know when a message is copied. 2- Know if a message has flags. 3- Know if a folder was opened, deleted, moved or created. 4- Know if an attachment was opened, deleted or added.   I tried Exchange 2010 Mailbox Audit but it can't give me this answers. Any tips?   Yours inputs are welcomed.   Regards, EEOC.

Khaja Moizuddin · Answer

https://social.technet.microsoft.com/Forums/exchange/en-US/ee7c12f1-19f5-44cf-a005-0753fb92352d/get-message-tracking-log-eventids-defined?forum=exchange2010
https://technet.microsoft.com/en-us/library/cc539064.aspx
http://exchangeserverpro.com/exchange-2010-message-tracking-log-search-powershell/
http://exchangeserverpro.com/exchange-2010-message-tracking/
Hope this helps you