Hi , I would like to know if there´s a way to get the following information. I need get exchange logs for connexions of USER_A for a spefiic month" I have looked on HUb Transport server/CAS on IIS logs but I couldn´t find out any records for this USER_A so does it mean that this user has no been connected during this specific month? Is there another place where May I validate this supposition? regards!! JASM

Hi JASM, For SMTP session from individual user, you can enable SMTP logging and then parse this data into spreadsheet. Also you can use Exmon tool if you want real time data. Logging SMTP Protocol Activity in Exchange 2010 and Exchange 2007: http://exchangepedia.com/2007/05/exchange-server-2007-logging-smtp-protocol-activity.html Anil MCC 2011,ITIL V3,MCSA 2003,MCTS 2010, My Blog : http://messagingschool.wordpress.com

Hi JASM, Per my knowledge, In Exchange 2010, If you have enabled mailbox audit logging, it can help you to check for user last access: Understanding Mailbox Audit Logging http://technet.microsoft.com/en-us/library/ff459237.aspx If you have not enabled audit logging or you are using Exchange 2007: You can use this command “Get-MailboxStatistics” to help you check for USER_A LastLogon Time Get-MailboxStatistics (Exchange 2007) http://technet.microsoft.com/en-us/library/bb124612(EXCHG.80).aspx Get-MailboxStatistics (Exchange 2010) http://technet.microsoft.com/en-us/library/bb124612.aspx You also need to check pop3 logs and IMAP4 logs to confirm he didn’t use pop3 or IMAP4 to connect Exchange Sever (in the special moth). Thanks, Evan