Discussion Locked

Exchange question

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Our exchange passwords may have been taken by an ex Administrator and lost,not sure and if it was up to me I would issue new passwords to all 250 users. but it is not, so is there anyway to see or monitor who logs in to their account after hours?

5 replies

by duwaned

Hi.

Exchange itself does provide for a very basic method of seeing this, but it is not all that good.

In Exchange Admin, expand your Organization name, then expand "Configuration", then expand "Server", expand your server name (or the name of the server where the mailbox sits, expand "Private information store", then click on "Logons". This will tell you when, and by who the mailbox was accessed.

Appart from this method, I am not aware of any other way to monitor access to mailboxes.
Regards.
Duwane

by ian mclaws

Hi,

If you set the logging options on the Private Information Store to monitor access in a verbose mode (full logging), you will generate a log file that can be read in Notepad that will list all accesses to the Priv.edb. This is fairly intensiveto do, and takes up hard drive space, so I recommend that you enable the logging only during the period you want to monitor, then turn it off. You'll find the log files in whichever directory the performance optimizer put them, with the transaction logs. If you're not sure where they are, search for and open a file called perfopt.8 and open it in Notepad, look for the location of the transaction logs.

Good luck,

Ian

ps: a lot of logging choices are presented on each database property page, use only those you require.

This discussion is closed to new replies.