exchange 2010 usr access logs
Hi!
Is there anyway to see the users logs on their account ?
We use exchange server 2010 and I can not find when a user accessed his mailox account .
Thank you!
April 17th, 2011 3:55pm
Did you enable mailbox auditing?
When you enable audit logging for a mailbox, you can specify which user actions (for example, accessing, moving, or deleting a message) should be logged for a logon type (administrator, delegate user, or owner). The audit log entries also include
important information such as the client IP address, host name, and process or client used to access the mailbox. For items that are moved, the entry includes the name of the destination folder.
Understanding Mailbox Audit Logging
http://technet.microsoft.com/en-us/library/ff459237.aspxJames Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
April 17th, 2011 4:08pm
Thanks for the reply!
I used this link http://exchangeserverpro.com/exchange-2010-mailbox-audit-logging to enable the mailbox auditing for our accounts ,but there I see that the owner is not active, also from that commands when I want to show details I get nothing on response.
Thanks!
April 18th, 2011 7:15am
What cmdlet did you run?
Set-Mailbox -Identity "james chong" -AuditOwner Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, Create -AuditEnabled $trueJames Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
April 18th, 2011 2:06pm
Before you can get details of log you have to enable it .
James's cmdlet is correct.
The account you specified should be an enabled mailbox account.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
April 19th, 2011 5:47am