Exchange Auditing Log is empty
We are running CCR cluster of Exchange 2007 SP2 with latest RU. I have enabled the FolderAccess auditing level to medium but still not getting any log in Event Viewer(Exhchange Auditing). Can anyone know and help me how to solve this? Thanks in advance.
January 13th, 2011 5:45am
Hi,
Have a look into this article : http://technet.microsoft.com/en-us/library/bb201670(EXCHG.80).aspx & also try changing the level from registry &
check it that helps or not.Ripu Daman Mina | MCSE 2003 & MCSA Messaging
Free Windows Admin Tool Kit Click here and download it now
January 13th, 2011 5:52am
I tried but no success. Any more suggestions please?
January 13th, 2011 6:31am
Please increase the diagnostic logging level to 7, restart the Information Store service, and check the issue again
By default, windows grants the “Domain Administrators” group all extended rights, including “ms-Exch-Store-Bypass-Access-Auditing”. If the bypass auditing right has been granted
to the users who you try to audit, the event won’t be logged
Resources:
Understanding Mailbox Access Auditing with Exchange Server 2007 Service Pack 2
James Luo
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
January 14th, 2011 1:30am