when run get-logonstattics for one mailbox that show last logon or logoff time info but i have show all logon or logoff info. for example from 1/1/2011 to 8/24/2011

The only ways (that I know of, at least) to get that kind of information is to have mailbox access auditing enabled: http://technet.microsoft.com/en-us/library/ee221156(EXCHG.80).aspx or from the Application event logs: http://www.msexchange.org/tutorials/Auditing-Mailbox-Access-Exchange-System-Manager-Event-Viewer.html If you did not have auditing enabled, or application logging of logon events and retained those logs for that time period I don't think you're going to be able to do that.[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "

when run get-logonstattics for one mailbox that show last logon or logoff time info but i have show all logon or logoff info. for example from 1/1/2011 to 8/24/2011 It is by design that the Get-LogonStatistics only shows last logon/access time, it is not design to monitor or audit. Your understanding would be appreciated. http://technet.microsoft.com/en-us/library/bb124415(EXCHG.80).aspxFiona