?
Solved

Turn off auditing for exchange events

Posted on 2005-04-20
2
Medium Priority
?
465 Views
Last Modified: 2013-12-04
Hi,
I have turned on "audit object access" in my server GPO and turned on auditing on a couple of sensative directories to enable me to view who is accessing these directories. This creates "object access" events in my security log which is what I want. However, in the security log there is whole lot of MS exchange "object access" events which I don't want to log. I opened Exchange System Manager and clicked on "properties" of Mailbox Store and Public Folder Store and turned of auditing under the security tab. The MS exchange "object access" events still being logged are:

Handle Closed:
 Object Server:          Microsoft Exchange
 Handle ID:                273679608
 Process ID:               2924
0
Comment
Question by:machealth
2 Comments
 

Author Comment

by:machealth
ID: 13830787
Also this eventid 565 is being logged:

Object Open:
       Object Server:      Microsoft Exchange
       Object Type:      Microsoft Exchange Logon
       Object Name:      /o=MHSDELMAR/ou=first administrative group/cn=Recipients/cn=wdouglas
       New Handle ID:      -
       Operation ID:      {0,4046006}
       Process ID:      2924
       Primary User Name:      DPHMAINSERVER$
       Primary Domain:      MHSDELMAR
       Primary Logon ID:      (0x0,0x3E7)
       Client User Name:      wdouglas
       Client Domain:      MHSDELMAR
       Client Logon ID:      (0x0,0x3DBB55)
       Accesses            Unknown specific access (bit 8)
                  
       Privileges            -

 Properties:
DELETE
WRITE_OWNER
ACCESS_SYS_SEC
MAX_ALLOWED
Unknown specific access (bit 6)
Unknown specific access (bit 7)
Unknown specific access (bit 9)
Unknown specific access (bit 10)
Unknown specific access (bit 11)
Unknown specific access (bit 12)
Unknown specific access (bit 13)
Unknown specific access (bit 14)
Unknown specific access (bit 15)
            Send As
0
 
LVL 1

Accepted Solution

by:
ranganathan_gp earned 1000 total points
ID: 13831012
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question