Re: Event Log - Mailbox Access

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Ace Fekay [MVP] (PleaseSubstituteMyActualFirstName&LastNameHere_at_hotmail.com)
Date: 06/30/04


Date: Tue, 29 Jun 2004 20:33:58 -0400

In news:1eca2d78.0406290118.59c29d7f@posting.google.com,
Rich in <tragically1969@hotmail.com> posted their thoughts, then I offered
mine
> In Exchange 5.5 if the admin or other user logged onto a mailbox that
> they did not own it would show in the event log, as far as i can see
> in EX 2000 it does not do this, am i missing something ?

You would need to enable auditing in AD for account logon access. The
results will show up in the Security Event logs.

You can also enable loggin under Diagnostic Logging on the server.
246904 - XADM- Logging in Exchange 2000 Server:
http://support.microsoft.com/default.aspx?scid=kb;en-us;246904

If you want something more specific, you would need to go to a 3rd party:
Exchange Security Risk Auditor 2.0 free download by C2C Systems Exchange
Security Risk Auditor (ESRA) allows the monitoring an:
http://www.mapistore.com/Exchange/Security_and_Encryption/Review_00282_index.html
http://www.msexchange.org/software/Security-&-Encryption/Exchange-Security-Risk-Auditor/Comments/

-- 
Regards,
Ace
Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.
Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
HAM AND EGGS: A day's work for a chicken; A lifetime commitment for a
pig. -- 
=================================


Relevant Pages

  • RE: site consolidation
    ... you are able to access three of the five Exchange 5.5 Sites. ... Please maximize the Diagnostic Logging for ADC as below. ... In the left pane, click Active Directory Connector. ...
    (microsoft.public.exchange.setup)
  • Re: site consolidation
    ... > The other two Exchange Server 5.5 report "the server is not operational" ... Please maximize the Diagnostic Logging for ADC as below. ... In the left pane, click Active Directory Connector. ...
    (microsoft.public.exchange.setup)
  • Re: NDR delivery delayed errors keep coming, any advice?
    ... Check your exchange queues, and see if you can determine the reason why the ... Telnet to Port 25 to Test SMTP Communication ... On the Diagnostics Logging tab, click on MSExchangeTransport, and SMTP ... This is an automatically generated Delivery Status Notification. ...
    (microsoft.public.windows.server.sbs)
  • Re: Audit Help
    ... > Do you know of any paper that gives a checklist in auditing exchange? ... 246904 - XADM- Logging in Exchange 2000 Server: ... Microsoft Windows MVP - Active Directory ...
    (microsoft.public.exchange2000.admin)
  • Re: Whats the top issue with exchange/outlook in your org.
    ... Excessive logging filling up the logfile drive quicker than usual. ... > just fyi, though, what Jim said is exactly what you're going to run into, ... I've been working with Exchange for almost ... >>> I'm not good at fixing management and systemic organizational problems. ...
    (microsoft.public.exchange.admin)