Hi, I am running Exchange 2003 Enterprise Edition in a clustered environment. I have setup Mailbox Logon monitoring through ESM. Each time a fail-over happens, the logging reverts back to "none". Any reason why this would happen?

How do you monitor the logon exactly? For monitor the mailbox logon, the resource below may help How to monitor mailbox access by auditing or by viewing Mailbox Resources in Exchange ServerJames Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com

Mailbox monitoring is done through ESM at the server level. This logs items in the eventvwr to say who is logging onto which maibox, ie not the primary account etc. When a server failover takes place, these settings are somehow reset.Just wondered how this could happen as the virtual exchange server should not mind on which node it resides on as they are both configured the same.

You mean that the diagnostic logging level is reset after failover?James Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com