Beginning with Exchange 2007 the Exchange database has had an internal table called EventHistory. This table has been used to track the events upon which several of the assistants are based and for other short term internal record keeping. The way to query the table hasn’t been publicized before but it has a number of uses:
- It may tell you the fate of a deleted item (for situations where Audit logging or store tracing was not in place at the time of the delete)
- It can list accounts who have recently touched a mailbox
- It can show you the clients that have touched a mailbox
I found this very nice and interesting blog by Exchange team.
You can read the full blog at http://blogs.technet.com/b/exchange/archive/2013/06/24/adventures-in-querying-the-eventhistory-table.aspx
Read my favorites blogs: