Hello, In Exchange 2003 with the default logging-levels, is there any way to track who access what mailbox please? One of my customers was hacked and an "exmapi.exe" tool used on the Exchange servers to access some mailboxes. Now they'd like to know exactly which mailboxes where accessed and from which account. Grateful for any suggestions. Thanks, - Alan.

Default logging levels? Limited. There might be something in the Event Log, but that can get quickly drowned out by legitimate access. Nothing is logged anywhere else, so if it doesn't appear in the event log you are out of luck. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources | In the UK? Hire Me.