Exchange logs connexions for a specific user and for a specific month

All replies

• 

  

  0

  Sign in to vote

  Hi JASM,

  For SMTP session from individual user, you can enable SMTP logging and then parse this data into spreadsheet. Also you can use Exmon tool if you want real time data.

  Logging SMTP Protocol Activity in Exchange 2010 and Exchange 2007:

  http://exchangepedia.com/2007/05/exchange-server-2007-logging-smtp-protocol-activity.html

   

  ---

  Anil MCC 2011,ITIL V3,MCSA 2003,MCTS 2010, My Blog : http://messagingschool.wordpress.com

  Sunday, July 24, 2011 4:08 AM
• 

  

  0

  Sign in to vote

  Hi JASM,

   

  Per my knowledge, In Exchange 2010, If you have enabled mailbox audit logging, it can help you to check for user last access:

   

  Understanding Mailbox Audit Logging

  http://technet.microsoft.com/en-us/library/ff459237.aspx

   

  If you have not enabled audit logging or you are using Exchange 2007:

   

  You can use this command “Get-MailboxStatistics” to help you check for USER_A LastLogon Time

   

  Get-MailboxStatistics (Exchange 2007)

  http://technet.microsoft.com/en-us/library/bb124612(EXCHG.80).aspx

   

  Get-MailboxStatistics (Exchange 2010)

  http://technet.microsoft.com/en-us/library/bb124612.aspx

   

  You also need to check pop3 logs and IMAP4 logs to confirm he didn’t use pop3 or IMAP4 to connect Exchange Sever (in the special moth).

   

  Thanks,

   

  Evan

  • Marked as answer by Evan LiuModerator Thursday, August 4, 2011 8:09 AM

  Tuesday, July 26, 2011 8:11 AM

  Moderator