Unlike 2000 and 2003 message tracking in Exchange 2007 is enabled by default. (for a 30 day period only - which would seem a sensible figure).

Note: To disable message tracking, issue the following poweshell command "Set-TransportServer SERVERNAME –MessageTrackingLogEnabled $false"

To use,

Note: The logs are in \Program Files\Microsoft\Exchange Server\TransportRoles\Logs\MessageTracking.

To Track Messages

1. Launch Exchange Management Console > Toolbox > Message Tracking.
2. Note when opened it may update itself - let it.
3. At "Message Tracking Parameters" put in the Relevant information and set the Date Range to search > Then follow the onscreen prompts.