Re: Login Auditing

Tech-Archive recommends: Fix windows errors by optimizing your registry

Outlook Express is configured to use just the username. I changed it to UPN
(username@xxxxxxxxxx), but still same problem.

IMAP is working fine, only problem is with POP3.

Exchange 2007 SP1 Rollup 6 was installed last week. Is it safe to uninstall
it?

ED.


"Andy David {MVP}" <adavid@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:un4kp4dmkmkgpli96tivq6mmpgpir39pj8@xxxxxxxxxx
On Mon, 16 Feb 2009 20:21:09 -0500, Andy David {MVP}
<adavid@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

On Mon, 16 Feb 2009 16:38:12 -0800, "ED" <nospam@xxxxxxxxxxxx> wrote:

It was working perfectly until it started last week.
Users don't enter their username/password. It is stored in outlook express
with the POP3 account settings.
(This is strictly an email server with no users logging into the
server/domain for resources/etc.)

I will check if any Windows and/or Exchange updates were been installed.

I am leaning more towards someone trying to hack the server, which is why
I
was looking into auditing unsuccessful logins.

There is diagnostic logging in ESM for pop3. You could also increase
logging in OE ( I think its under Advanced Tab). I would test within
the LAN as well.


For some reason I assumed ESM, sory. For Exchange 2007:
Microsoft.Exchange.Pop3.exe.config
http://technet.microsoft.com/en-us/library/aa997690.aspx

FWIW, I had an issue similar to yours with IMAP some time ago after
applying a roll-up. Having the user logon with their UPN (
user@xxxxxxxxxx) instead of domain\user solved it.


ED.

"Andy David {MVP}" <adavid@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:6ltjp49b8pli2ejksocqnju304qtgg2k1m@xxxxxxxxxx
On Mon, 16 Feb 2009 13:05:03 -0800, "ED" <nospam@xxxxxxxxxxxx> wrote:

Hi,

Exchange 2007 SP1 up to date.

Users are being locked out of their mailbox and I'm trying to find out
why.
(I know it's the security policy, but what's causing the unsuccessful
logins?) Is it possible through exchange to log the unsuccessful mailbox
access attempts? I would need to get at least the username and source IP
address.

I have enabled auditing through windows 2003, but the IP address is
always
blank.

I don't know if this is relevant, but users are using Outlook Express -
POP3.

Thanks in advance,

ED



When did this start? Did it work before? What format are users
entering their username?



.

Relevant Pages

  • Re: Was ist so schlimm am pop3-connector?
    ... Ich würd das Postfach in Outlook einbinden. ... Outlook holt die Mail via POP3 und legt sie ... und versendet via SMTP an Exchange. ... Daniel Melanchthon - MVP Exchange Server ...
    (microsoft.public.de.exchange)
  • Re: Outlook keep changing pop server to 127.0.0.1
    ... google 'Outlook antivirus plugin' and you will ... Your users should only be manipulating email in Exchange directly in their ... You can determine if this is the problem by disabling pop3 scanning on the ...
    (microsoft.public.windows.server.sbs)
  • Outlook2003 moves all messages in Exchange inbox on send/receive
    ... I am having a strange Outlook problem that I am hoping someone can ... POP3 server as the main message service. ... I also have an Exchange 2003 ...
    (microsoft.public.outlook.configuration)
  • Re: Meeting updates not being recieved through POP3
    ... I am unable to download the message using Outlook 2003 as well. ... POP3 protocol so the resolution that is givin in the KB will not work for me. ... Second this article is intended for Exchange 2000. ... original meeting request comes through fine. ...
    (microsoft.public.exchange.admin)
  • Re: POP3 email without the connector
    ... When you join these pcs to the domain all outlook settings will be gone, ... POP3 is not for a business environment, doesn't support BCC, clear text passwords over internet and if implement exchange IMF pop3 isn't supported. ... SMTP is the business solution, or 3rd party pop3, GFI Mailessentials or popbeamer. ...
    (microsoft.public.windows.server.sbs)