Is there a more subtle way to find out who is using IMAP and/or POP mail on Exchange2010/2013 over a period of time ? There is method: https://technet.microsoft.com/en-us/library/aa997690%28v=exchg.150%29.asp

but it is not the most practical way as digging through those logfiles is quite labour intensive and too precise as far as I saw it. They are also meant more for troubleshooting. IMAP/POP is not broken, I just want to know who is using it so I can make changes in a more predictable way.

Anyone an alternative to IMAP/POP protcol logging ?

thanx,

Th

Not really. Of course you could always disable it at the mailbox level across the board with set-casmailbox, then see who complains and enable it specifically for them. 

thanx for the reply,

That's  a nogo. Applications would fail, unfortunately no one can me which ones.

Seems the only way to go is the imap/pop logging and using logparser.

regards,

Thorwald

Hi,

I searched around and found that we can determine the POP/IMAP current connections through "Performance Monitor" but we cannot find out the users through it.

So only way is the Imap/Pop Logging and Logparser.

Similar thread for reference

https://social.technet.microsoft.com/Forums/exchange/en-US/2be9e9e8-05e4-44b4-9c6f-c4e7e7e52cac/determining-imap-and-pop-connections-to-exchange-2010-server?forum=exchange2010

Best Re