Hi all~~Under this link:http://technet.microsoft.com/en-us/library/bb201661(EXCHG.80).aspxU can find Processes with Configurable Event Logging Levels.Now my question is: does any1 know which of those (from the list) are somehowconnected with user logon ?I mean, when a user is trying to log into the exchnage, let's say into not his mailbox.Any help is appreciated, thnx

MSExchangeIS\9000 Private\Logons -Level Low You will need to verify AuditEvents in Application log to check who has accessed the mailboxes.

w0w, that was fast OkeY, thnx verry much I'll test it and let U know