Exchange 2007  Audit Mailbox
Hi , Can we audit Mailbox access in Exchange 2007 All what i have seen on Web that to see who has been access the particular mailbox, I know that we can Enable Event Log level, Is there another way or any Powershell command that will provide the list of user who has access particular mailbox. Thanks in Advance Regards , PV pankaj verma
August 9th, 2009 2:25pm

Well, there isn't any other way natively in Exchange but after enabling event log logging for logons you can parse the application event log with powershell cmdlets... Increase Logons diagnostic logging to Low on Exchange Mailbox server with below cmdlet... Set-EventLogLevel MSExchangeIS\9000 Private\Logons -Level Then look for event id 1016 in application event log with below cmdlet... Get-Eventlog application | Where{$_.eventid -eq "1016" -and$_.message -like "*UserMailboxName*"} Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com
Free Windows Admin Tool Kit Click here and download it now
August 9th, 2009 4:25pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics