Moving Mailboxes Across Forests

• $c = Get-Credential  <-- Enter your account for X domain
• $t = Get-Credential  <-- Enter your account for Y domain
• move-mailbox -TargetDatabase "servername\storage group\database" -Identity 'mailbox name' -GlobalCatalog servername -SourceForestGlobalCatalog servername -NTAccountOU "OU=XXXX,DC=domain,DC=com" -SourceForestCredential $c -TargetForestCredential $t

Make sure to transfer any X500 addresses over as well.

Exchange 2007 - Message Tracking

Search by IP:

• get-messagetrackinglog -ResultSize unlimited -Start "9/3/2010 12:00:00 AM" -End "9/5/2010 11:59:00 PM" | where {$_.ClientIP -eq "xxx.xxx.xxx.xxx"} | fl ClientIP

Search by sender

• get-messagetrackinglog -Sender "email@domain.com" -EventID "SEND" -Server servername -Start "2011/08/01 12:00:00 AM" -End "2011/10/13 12:00:00 AM" -ResultSize Unlimited | where {[string]$_.recipients -like "*@*"} |select Sender,@{Name="Recipients";Expression={$_.recipients}},MessageSubject,MessageId,Timestamp,ConnectorId | export-csv C:\filename.csv