Discussion Locked

Auditing Mailbox Access

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to find in the event logs where to find users that have accessed another users mailbox. Before it used to be recoreded on the mail servers when it was Exchange 5.5. Where is it recored now and what is the event that it records?

Any help would be appreciated.

3 replies

by p.j.hutchison

You need to enable Logon/Logoff auditing in Group Policy to record logon events in the Security Log.
Alternatively, you can enable connections in the Exchange IS Diagnostic Logging in Exchange Manager.

This discussion is closed to new replies.