Log monitoring of create/modify mailboxes
Greetings all,At my employer we have been tasked with auditing/monitoring the following things:Create and Modify Shared Mailbox User Accounts Create and Modify User Exchange Mailboxes Create and Modify Contacts However, I have had our log analysis team pick through the logs on the DC's and the logs on the Exchange servers to no avail. Currenlty we have no idea where events are generated for these actions (and the level of logging that will be affective). Our DC's are set to the highest amount of logging without overwhelming them and our exchange servers are set to default logging. Is there a setting that needs to be cranked up on the Exchange side of things (if so suggestions would be great)? Or is this strictly an object level auditing problem in AD (I hope not)?Thanks for any input,Nick
November 15th, 2007 7:59pm
The best way to do this is going to be with MOM and the Exchange manegement pack, other wise it is AD logging levels.
Free Windows Admin Tool Kit Click here and download it now
November 15th, 2007 8:25pm
By AD logging levels, you mean object level auditing? Thanks for the response.-Nick
November 15th, 2007 8:28pm