Gertjan
sounds like exchange to me, however put quite simply, turn thr journaling task off and see if it still happens

Hello JW.

We're getting too many mails in journal to 'turn off'  journaling, and I also cannot determine which journalmailbox the mails land.

But, good attemp! I'll see what I can do.

Good attempt? Cheeky bugger :)
this is what vmware and test environments are made for!

I'll check.

Maybe I am missing something here, but how is exactly is the message getting into the deleted items folder in the Journal Mailbox?  EV isn't doing that. 

Who's the read reciept coming from by the way?  It shouldn't be the journal mailbox...

I have seen this behavior before by the way, and it was happening because an app that adds a disclaimer to emails was misconfigured.
Here are a few technotes on the topic
http://support.veritas.com/docs/329291
http://support.veritas.com/docs/317044

Well i think thats what the thread is about, is it EV deleting the items?
I'd say no, and that it was exchange, however , items deleted without being read will generate the read receipt, which is why regular journaling via EV can cause those because post processing deletes the items and the unread receipt gets triggered, which is why theres that reg key to remove it.

I'm pretty sure its not EV deleting the item and that its the transport rule and theres little that can be done, but like i said, if you want to test, turn the journal task off and see if it still occurs and if it does still occur then its not EV etc

Hello JW and Jolaine,

I've seen the technotes, and did follow them. We do not use an app that adds disclaimers, nor are the mails scanned by AV-application.

I've followed technote to put journalmailboxes in distibutiongroup, set 'never send a response' on that also, zapped the journalmailboxes etc.

I tend to agree with JW, even without troubleshooting, that it is actually exchange, or a hidden 3rd party app causing this. I would expect the mails if EV cannot handle them to go into the 'unable to store' or invalid journal report folder or somthing.
As they are moved to the deleted items folder, without any indication that ev touched them, I believe it is exchange having problems with the displaynames. I dedicated (yeah yeah again) tomorrow for configuring the dev environment to behave like the real environment.

Thx. and will update tomorrow.