Want to search logs to find out who changed Virtual SMTP server settings


I discovered some settings in my default Virtual SMTP server in Exchange 2003. I know I did not put them in there, and I'd like to find out who did (other admins). Anyone know which logs I should check to find this information? I have Win2k3 domain.

thanks in advance
Trevor LocalAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

how heavily are you auditing exchange? i 99% sure it wont turn up in the server logs...

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Trevor LocalAuthor Commented:
I do not know what auditing is currently set.
If you are auditing the server then your event logs will be full of things happening. With auditing enabled the event logs become close to useless, which is why if you are running auditing you should use a third party tool to process the logs.

However even with auditing enabled I doubt whether a change to the SMTP virtual server would have been logged.

Trevor LocalAuthor Commented:
thanks for your reply. do you recommend any third party auditing software?
You are simply looking for something that can process the logs.
One of clients is using a GFI product called Event Log Manger (I think that is the name, I can't reach GFI's web site from this location) which seems to the job quite well.

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.