"Last Logged On By" in Exchange System Manager
I was reviewing mailboxes in System Manager looking for oversized mailboxes when I noticed that a couple of mailboxes had a username in "Last Logged On By' other than the name of the user. Does this mean that somebody else in the company is logging into their email or is there another possible explanation?
September 10th, 2008 12:01am

If the name is one of your other users, it may be because that user tried to access the other user's calendar. I am pretty sure that Exchange System Manager is showing you "access attempts", though and not actual accesses. It shows the last person to logon or try to logon to a particular mailbox. You can enable diagnostics logging for private information store logons also, and audit mailbox access that way. This type of logon could be someone opening another user's calendar through Outlook, for example. If it is 2 people that don't work together or it is people that should not be trying to open the boss' calendar, then you should probably investigate.
Free Windows Admin Tool Kit Click here and download it now
September 10th, 2008 1:19am

That's exactly what it turned out to be. Thanks for the insight.
September 10th, 2008 1:23am

You are welcome. Any time!
Free Windows Admin Tool Kit Click here and download it now
September 10th, 2008 1:58am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics