Exchange Server unauthorized access attempt
Posted on 2003-11-24
My Exchange administrator forwarded this event log message to me today. I am concerned about what it means -exactly- and also if it could occur (the event) inadvertently. I don't want to accuse anyone of wrongdoing, but I need to be prudent and take appropriate action. Please advise.
Date/Time: 2003-11-24 09:44:56'00
Event Log: Application
Source: MSExchangeIS Mailbox Store
Category: Access Control
Firstname.firstname.lastname@example.org failed an operation because the user did not have the following access rights:
'Delete' 'Read Property' 'Write Property' 'Create Message' 'View Item' 'Create Subfolder' 'Write Security Descriptor' 'Write Owner' 'Read Security Descriptor' 'Contact'
The distinguished name of the owning mailbox is
/O=Our Compnay Name/OU=FIRST ADMINISTRATIVE GROUP/CN=RECIPIENTS/CN=My.mailbox.
The folder ID is in the data section of this event.