Exchange 2007 SP3 - Who Disabled My Mailbox?? RRS feed

  • Question

  • Is there a way to tell who disabled a mailbox on Exchange 2007 SP3? A bunch of mailboxes were disabled, and nobody seems to know who did it.


    Any suggestions on how to determine who disabled the mailboxes?

    Friday, April 29, 2011 6:02 PM


All replies

  • A polygraph?
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Friday, April 29, 2011 7:31 PM
  • Who moved my Cheese?

    You could always see what time they were disabled:

    Get-MailboxStatistics -database xxxx | where-object { $_.DisconnectDate -ne $null }

    Friday, April 29, 2011 7:40 PM
  • I already know when they were disabled, but I dont know by who.......that is the problem. No way to audit who disable the mailboxes?
    Friday, April 29, 2011 7:55 PM
  • Hi DVDKEA,


    Per my knowledge, there isn’t any good way in Exchange 2007. But maybe you can follow the workaround in this thread to have a try:


    Is there a way to audit who disables an Exchange 2007 SP2 mailbox?






    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, May 3, 2011 8:42 AM