Hi, I've set up some mailboxes with shared access ("full access"). the users shall be able to read all mail in these, as well as "send as" these. Is it _any_ way to track which user did what (e.g. sent a message) in these mailboxes, or are any/all logging done with the mailbox identity as "agent"? Thanks for your help!

No, sorry. -- Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." . "Fields-Jac" wrote in message news:5c825a31-4046-42ff-aaf1-873e1efa167e... Hi, I've set up some mailboxes with shared access ("full access"). the users shall be able to read all mail in these, as well as "send as" these. Is it _any_ way to track which user did what (e.g. sent a message) in these mailboxes, or are any/all logging done with the mailbox identity as "agent"? Thanks for your help!Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Hi, In exchange 2007 SP2 or higher version, you are able to track the information you were referring by enabling Mailbox Access Auditing: 1. Open EMC->Server Configuration->Mailbox. 2. Right click your mailbox server and choose Manage Diagnostic logging Properties. 3. Expand the MSExchangeIS category and then expand the 9000 Private category. 4. Select the following category in the configuration screen and then choose the diagnostics logging level to "High": Extended Send As, Folder Access, Message Access, General, Send As and Send On Behalf Of 5. Click Configure to apply the change. 6. Open services.msc and restart MS Exchange Information Store service. The information is logged into the 'Exchange Auditing' event log category. If the 'Exchange Auditing' event log is still empty after enabling Mailbox Access Auditing, looking for the events in ‘Application’ category . This is a sample of a exchange auditing log: Administrator sent a message as qq. =========================== Event Type: Information Event Source: MSExchangeIS Mailbox Store Event Category: Send As Event ID: 1032 Date: 5/19/2010 Time: 1:44:25 PM User: N/A Computer: 194125M2 Description: /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=Administrator sent a message as /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=qq. =========================== More information, referring the following article: Exchange 2007 Mailbox Access Auditing http://www.msexchange.org/articles_tutorials/exchange-server-2007/compliance-policies-archiving/exchange-2007-mailbox-access-auditing-part1.html