How do I track who accessed which mailbox?
Hello, In Exchange 2003 with the default logging-levels, is there any way to track who access what mailbox please? One of my customers was hacked and an "exmapi.exe" tool used on the Exchange servers to access some mailboxes. Now they'd like to know exactly which mailboxes where accessed and from which account. Grateful for any suggestions. Thanks, - Alan.
October 8th, 2011 7:52pm

Default logging levels? Limited. There might be something in the Event Log, but that can get quickly drowned out by legitimate access. Nothing is logged anywhere else, so if it doesn't appear in the event log you are out of luck. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources | In the UK? Hire Me.
Free Windows Admin Tool Kit Click here and download it now
October 9th, 2011 7:38am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics