Dear all, in case someone rightlessly tries to gain access to a E2K3 Mailbox is it possible to retrace this action, e.g. due to Eventlog? Even members of certain groups would possibly be able to gain access to a Mailbox by giving him or her Full Access Permission, opening the Mailbox, and then removing the corresponding permissions. All unseen, no one would ever know. This question came up recently when discussing certain security issues with our CEO. Regards Alex

On Thu, 17 Jun 2010 11:33:47 +0000, jaymz1102 wrote: > > >Dear all, in case someone rightlessly tries to gain access to a E2K3 Mailbox is it possible to retrace this action, e.g. due to Eventlog? Even members of certain groups would possibly be able to gain access to a Mailbox by giving him or her Full Access Permission, opening the Mailbox, and then removing the corresponding permissions. All unseen, no one would ever know. This question came up recently when discussing certain security issues with our CEO. Regards Alex That activity would be recorded in the applications log (not the security log). --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP