I checked the autoclean settings and they are not set.
The email that is being deleted after 90 days is being deleted from the deleted items folder.
I also checked the autoclean log and do not see any entries there, I set the logging for detailed.
They claim to not be using any outlook or phone for email, just the webmail interface.
One thing I notice in the administrator log, is :
IMAP Attempting to login user: user123
then I also see this..
Webmail Attempting to login user: user123
Does this mean the user is using an external app connecting via IMAP, or does loging into webmail show this as IMAP as well?
VInce