locked
Exchange 2007 SP3 - Who Disabled My Mailbox?? RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Is there a way to tell who disabled a mailbox on Exchange 2007 SP3? A bunch of mailboxes were disabled, and nobody seems to know who did it.

     

    Any suggestions on how to determine who disabled the mailboxes?


    Friday, April 29, 2011 6:02 PM

Answers

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    A polygraph?
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Friday, April 29, 2011 7:31 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Who moved my Cheese?

    You could always see what time they were disabled:

    Get-MailboxStatistics -database xxxx | where-object { $_.DisconnectDate -ne $null }

    Friday, April 29, 2011 7:40 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    I already know when they were disabled, but I dont know by who.......that is the problem. No way to audit who disable the mailboxes?
    Friday, April 29, 2011 7:55 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi DVDKEA,

     

    Per my knowledge, there isn’t any good way in Exchange 2007. But maybe you can follow the workaround in this thread to have a try:

     

    Is there a way to audit who disables an Exchange 2007 SP2 mailbox?

    http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/5b892ea7-5d70-485c-9905-2d4f28519712

     

    Thanks,

     

    Evan

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, May 3, 2011 8:42 AM
    Moderator