locked
Exchange 2007 SP3 auditing OWA RRS feed

  • Question


  • i have two question about auditing in exchange 2007.

    Scenario:

    We have 2 user: user1, user2 and they are able to access to OWA.

    user1 have full access and send As permition of user2's mailbox.

    User1 access to his mailbox by OWA and open user2's mailbox

    required solution:

    I need to log when user1 has logged in to user2's mailbox

    I had tryed to configure the level log of:

    MSExchangeIS\9000 Private\Logons
    MSExchangeIS\9000 Private\Folder Access
    MSExchangeIS\9000 Private\Message Access
    MSExchangeIS\9000 Private\Extended Send As
    MSExchangeIS\9000 Private\Extended Send On Behalf Of

    but i see many event and i can't log much logs.

    Other problem: why the log are stored in application log and not in Exchange Auditing log?

    Thanks in advance.

    Maw81maw

    Wednesday, August 10, 2011 10:17 AM

Answers

All replies