We use office365 hosted email and have a situation. There is a mailbox that multiple users have full access to. Someone deleted an email, but didn't remove it from the deleted items folder.
We need to figure out who that was. Auditing was not turned on at the time, and Microsoft holds firm that they cannot look at our data in any way, shape, or form.
We use Outlook 2013 clients in cached exchange mode on Windows 8.1. Is there any possible way you can think of to find out who this was? I really mean any possible way - whether complicated, convoluted, or whatever else. We really need to find out.
I was thinking maybe there's a synchronization log that possibly might have a record of a send/receive to delete the email? So far I haven't found anything. I'd really appreciate your help.