How to check who and all are accessing particular mailbox in Exchang

Here is a good site that lays it all out for you:

http://www.msexchange.org/articles-tutorials/exchange-server-2010/compliance-policies-archiving/auditing-mailbox-access.html

Hi Charles

Thanks

But I am not looking for Audit

*Currently who and all accessing a particular mailbox is enough

Try this, just enter the mailbox you're looking at:

Get-Mailbox -identity "mailbox name here" | Get-MailboxPermission | where {$_.user.tostring() -ne "NT AUTHORITY\SELF" -and $_.IsInherited -eq $false}

Here is a good site that lays it all out for you:

http://www.msexchange.org/articles-tutorials/exchange-server-2010/compliance-policies-archiving/auditing-mailbox-access.html

• Proposed as answer by Mike CrowleyMVP, Moderator 14 hours 33 minutes ago

Here is a good site that lays it all out for you:

http://www.msexchange.org/articles-tutorials/exchange-server-2010/compliance-policies-archiving/auditing-mailbox-access.html

• Proposed as answer by Mike CrowleyMVP, Moderator Friday, April 17, 2015 4:53 PM

Hi,

We can use Get-MailboxPermission to check the users who have full access permission to this particular mailbox:

Get-MailboxPermission -Identity Particular | Where-Object {($_.IsInherited -eq $false) -and ($_.User -notlike 'NT Authority\Self')}

Additionally, the Get-MailboxFolderPermission can be used to check the folder permission for this particular mailbox:

Get-MailboxFolderPermission -Identity particular@domain.com:\Calendar | FL

Regards,

PLEASE NOTE:

I dont need who has access.

I need who is ****CURRENTLY**** accessing the mailbox

Mailbox audit logging:

https://technet.microsoft.com/en-us/library/ff459237(v=exchg.150).aspx

Do you literally want to see active connections to the mailbox?

This will show active connections:

http://blogs.technet.com/b/rmilne/archive/2014/12/17/powershell-script-to-get-active-cas-connections.aspx

I have not tried but maybe there is a way to see connections to a particular mailbox?

Not much out there about observing access to a mailbox in real time.

One radical solution would be to use WireShark and somehow filter by mailbox name and... try to find relevant information in the massive amount of connection data.