Exchange Auditing Log is empty
We are running CCR cluster of Exchange 2007 SP2 with latest RU. I have enabled the FolderAccess auditing level to medium but still not getting any log in Event Viewer(Exhchange Auditing). Can anyone know and help me how to solve this? Thanks in advance.
January 13th, 2011 5:45am

Hi, Have a look into this article : http://technet.microsoft.com/en-us/library/bb201670(EXCHG.80).aspx & also try changing the level from registry & check it that helps or not.Ripu Daman Mina | MCSE 2003 & MCSA Messaging
Free Windows Admin Tool Kit Click here and download it now
January 13th, 2011 5:52am

I tried but no success. Any more suggestions please?
January 13th, 2011 6:31am

Please increase the diagnostic logging level to 7, restart the Information Store service, and check the issue again By default, windows grants the “Domain Administrators” group all extended rights, including “ms-Exch-Store-Bypass-Access-Auditing”. If the bypass auditing right has been granted to the users who you try to audit, the event won’t be logged Resources: Understanding Mailbox Access Auditing with Exchange Server 2007 Service Pack 2 James Luo TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
January 14th, 2011 1:30am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics