i have two question about auditing in exchange 2007. Scenario: We have 2 user: user1, user2 and they are able to access to OWA. user1 have full access and send As permition of user2's mailbox. User1 access to his mailbox by OWA and open user2's mailbox required solution: I need to log when user1 has logged in to user2's mailbox I had tryed to configure the level log of: MSExchangeIS\9000 Private\Logons MSExchangeIS\9000 Private\Folder Access MSExchangeIS\9000 Private\Message Access MSExchangeIS\9000 Private\Extended Send As MSExchangeIS\9000 Private\Extended Send On Behalf Of but i see many event and i can't log much logs. Other problem: why the log are stored in application log and not in Exchange Auditing log? Thanks in advance. Maw81maw

Try the IIS log on the Client Access Server (CAS), which can normally found at C:\WINDOWS\system32\LogFiles\W3SVC1. Open the log for the day in question, it normally logs the page the user is accessing, the domain account they used and the IP address they connected from John.

IIS logs wont tell you everything. Diagnostic logging in Exchange will. when using diagnostic logging you will get a lot ov information. In real life you need something to filter those events you're intresting in. You also need storage for all logs since they take up space. lasse at humandata dot se, http://anewmessagehasarrived.blogspot.com

Hi JohnM78, in this log i can find how have access to OWA but i can't understund how have open other mailbox, considers that we have about 2700 mailboxs. Thanks.

Is this what you're looking for http://technet.microsoft.com/en-us/library/ee221156(EXCHG.80).aspx lasse at humandata dot se, http://anewmessagehasarrived.blogspot.com

Hi There, From ur question - your requirement is to just get the auditing, it does'nt matter, in what way user is access the others mailbox. I would suggest you to go thru the below url to, which has the detail about auditing, well its related to sp2, but it shud work with sp3 as well. Would suggest you to please http://www.msexchange.org/articles_tutorials/exchange-server-2007/compliance-policies-archiving/exchange-2007-mailbox-access-auditing-part1.html http://www.msexchange.org/articles_tutorials/exchange-server-2007/compliance-policies-archiving/exchange-2007-mailbox-access-auditing-part2.html Cheers, Ashwini KumarKnow more about Messaging :-)

Hi, Do you have any update? ThanksSophia Xu