• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2453
  • Last Modified:

How to audit owa/exchange 2003 logon/logoff events

Hello,
I know how to audit logon/logoff events in Windows 2003 server/domain but I also need to log events in OWA on Exchange 2003. Anyone know how to do this?
Thanks.

Tony
0
tadduci
Asked:
tadduci
  • 4
  • 3
  • 2
  • +1
2 Solutions
 
SembeeCommented:
If you want JUST OWA, then you could use the logs on the web server. You will need something to parse the logs though, as there will be a lot of fluff you don't need.

Simon.
0
 
tadduciAuthor Commented:
Yes, that is the other part of a later question. What do you recommend to parse thru. I am looking for something that I can shove a .evt file at and it allows me to specific/pick the user and then shows me the date ranges of events... anything close to that would be good.

What properties would I configure on IIS 6 to log the owa events?

Thanks.
Tony
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
Roshan25Commented:
you can use the msft kit
http://www.microsoft.com/downloads/details.aspx?familyid=56fc92ee-a71a-4c73-b628-ade629c89499&displaylang=en
or you can get like webtrends, surfstat....etc.
0
 
tadduciAuthor Commented:
Where in IIS/Exchange do I turn on the specific items I need to turn on to capture this detail?
0
 
Roshan25Commented:
go into Start....Programs......Administrative Tools.....IIS Manager.....
go to the web site....<Default Web> and right click and you should see in the Genaral tab in the bottom the option.
0
 
tadduciAuthor Commented:
So this is not in Exchange that I need to turn up the logging settings? IIS, and modify the Exchange Web no not the Default web?
0
 
SembeeCommented:
Exchange uses the default web site for OWA access.
Therefore to capture OWA use then you have to monitor the web site.

Simon.
0
 
Roshan25Commented:
you are changing the setting for the default web...OWA is a sub folder in the default web.
0
 
tadduciAuthor Commented:
sembee: is there any specific log settings I should use in your opinion? What events do I look for in my security log or is it the app log?
thanks.
tony
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 4
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now