Re: Audit Inbox access

Tech-Archive recommends: Fix windows errors by optimizing your registry



Ropester <Ropester@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Is there a tool or third party software I can purchase to audit email Inbox
access, when I look through System manager I see users accessing other
peoples email but it's usually for Calendars. I have turned on auditing and
monitor the event logs but is there a tool or third party application to
help automate this for me?

You can try C2C's Exchange Security Risk Auditor
(http://www.c2c.com/site/products/activemailtools/esra/default.asp).
It won't look at the Event log but it will report on who has what
permission on which mailbox/folder/user.

--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@xxxxxxxxxxxxx
Or to these, either: mailto:h.pott@xxxxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxxxx
.



Relevant Pages

  • Too much auditing?
    ... an "auditing" question... ... propose to overwrite event logs as needed, ... account change, system events, process events, EVERYTHING. ... it's totally burried amoung all the junk!) ...
    (microsoft.public.win2000.security)
  • Re: Files and folder monitor
    ... before it shows up in the Event logs to use this nifty utility, ... to be enabled on the machine, whether thru Group Policy or a local policy to ... monitor files, folder and/or printer access. ... Enable and Apply Windows Security Auditing: ...
    (microsoft.public.windows.server.networking)
  • Re: Audit Object Access Problem
    ... You will normally get some events even if you do not have any auditing ... You might want to use the free tool dumpsec from SomarSoft to see ... security option on those computers in Local Security Policy to make sure ... > event logs fill up in a couple of minutes even if I set them to 100 ...
    (microsoft.public.win2000.security)
  • Auditing of exporting data to removable media
    ... Does W2K auditing have the capability to log to one of the ... event logs the fact that a user has copied data from the ...
    (microsoft.public.win2000.security)