Exchange 2007 Audit Mailbox
Hi ,
Can we audit Mailbox access in Exchange 2007 All what i have seen on Web that to see who has been access the particular mailbox, I know that we can Enable Event Log level, Is there another way or any Powershell command that will provide the list of user who has access particular mailbox.
Thanks in Advance
Regards ,
PV
pankaj verma
August 9th, 2009 2:25pm
Well, there isn't any other way natively in Exchange but after enabling event log logging for logons you can parse the application event log with powershell cmdlets...
Increase Logons diagnostic logging to Low on Exchange Mailbox server with below cmdlet...
Set-EventLogLevel MSExchangeIS\9000 Private\Logons -Level
Then look for event id 1016 in application event log with below cmdlet...
Get-Eventlog application | Where{$_.eventid -eq "1016" -and$_.message -like "*UserMailboxName*"}
Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com
Free Windows Admin Tool Kit Click here and download it now
August 9th, 2009 4:25pm