SMTP addrseses mysteriously changing

Posted on 2006-07-06
Last Modified: 2010-03-06
Have had a couple tickets in the past few days with users accounts that have been in the org. for many years and their smtp addresss have changed from per say .gov to .gob.

We want to make sure this is not being dont intentionaly by someone with access.  Is there anyway to granularly log changes made to the exchange objects?  We can look at the object modify date but is there anyway to find out which account modified the object?

Question by:mannings703
LVL 104

Accepted Solution

Sembee earned 500 total points
ID: 17052629
The only way is to turn up auditing. You will probably have to do it on the domain. It will generate an awful amount of logs.
I haven't heard of this happening to Exchange before, so as long as the recipient policy is correct I would suspect that this is a human change. Change the password on your administrator account so that no one can hide behind it. Don't give it to anyone and see if the changes stop.


Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

"Migrate" an SMTP relay receive connector to a new server using info from an old server.
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now