Re: Auditing?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

On Fri, 10 Feb 2006 23:31:14 -0800, Dan
<Dan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Is anyone doing a lot of auditing on their Exchange box? I was doing some
success auditing on account logons and I noticed a huge jump in my security
logs and my disk I/O went crazy. After turning it off I'm seeing a much
better I/O rate. Is it possible that I saw such a high jump because I have a
number of Linux/IMAP users? or is it just a normal thing that this would
happen? I have about 250 users total and most of the Outlook users (80% of
the 250) use cached mode which I thought would cut down on the amout of
traffic in the security log.
Thanks,
Dan


Cache mode creates twiece as many connections to the Exchange Server
as online mode actually. Dont think that shows in the security log
however. Whenever you crank up logging, there is a performance hit in
some way.


.

Relevant Pages

  • Re: Did I give up on telnet too easily?
    ... > unencumbered by security to plant interesting things, ... > unless they jump through my hoop: doesn't that scale well to more than 1 ...
    (comp.os.linux.networking)
  • Re: Did I give up on telnet too easily?
    ... > unencumbered by security to plant interesting things, ... > unless they jump through my hoop: doesn't that scale well to more than 1 ...
    (comp.os.linux.security)
  • Re: USB root Hub
    ... I think you have a gross misconception about security. ... > Joe Blow to stick a jump drive into my usb port a copy any ... > drive into my usb port. ...
    (microsoft.public.win2000.general)
  • Re: layers.
    ... You will need to change the code to VBA now because of security measures ... taken since Vsio 2000 ... > the page you wish to jump to. ...
    (microsoft.public.visio.general)
  • Re: Norton firewall blocks AOL buddy list
    ... I know security sucks, because it limits the ways of the user. ... the logging and figure out what your firewall is doing. ... Turning off a firewall is something you should not do unless you really ... learn how to find the problem and fix it without turning it off. ...
    (comp.security.firewalls)