Hi all,

Like to check what is the event id that will appear on Windows Event Viewer when a mailbox is access by someone else?

For exchange 2007, the event id is 10100. I cannot seems to find the id for 2013 on the net.

Also, if I wish to monitor exchange administrator if they are accessing any other person's mailbox,

Would this power shell command be enough to turn on what I wish to monitor?

Set-Mailbox -AuditEnabled:$true

Thanks!

Zack

• Edited by Zack Ng 18 hours 42 minutes ago

Hello

tip: https://technet.microsoft.com/en-us/library/ff459237%28v=exchg.150%29.aspx
https://technet.microsoft.com/en-us/library/jj150552(v=exchg.150).aspx

https://technet.microsoft.com/en-us/library/ff461929(v=exchg.150).aspx