Exchange 2010 SP1及以上版本有两种级别的审计功能，一个叫Mailbox auditing logging,一个叫Administrator audit logging (AAL)。我想你需要的是后者吧.
AAL不但对直接在 Exchange 命令行管理程序中运行的 cmdlet 进行审核。也会记录使用 Exchange 管理控制台 (EMC) 和 Exchange Web 管理界面执行的操作。
更多详情请访问Technet Library: http://technet.microsoft.com/zh-cn/library/dd335052(v=exchg.141).aspx
Tony Chen TechNet Community Support
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
