Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 203
  • Last Modified:

Want to search logs to find out who changed Virtual SMTP server settings

hello

I discovered some settings in my default Virtual SMTP server in Exchange 2003. I know I did not put them in there, and I'd like to find out who did (other admins). Anyone know which logs I should check to find this information? I have Win2k3 domain.

thanks in advance
0
Trevor Local
Asked:
Trevor Local
  • 2
  • 2
2 Solutions
 
Jay_Jay70Commented:
how heavily are you auditing exchange? i 99% sure it wont turn up in the server logs...
0
 
Trevor LocalAuthor Commented:
I do not know what auditing is currently set.
0
 
SembeeCommented:
If you are auditing the server then your event logs will be full of things happening. With auditing enabled the event logs become close to useless, which is why if you are running auditing you should use a third party tool to process the logs.

However even with auditing enabled I doubt whether a change to the SMTP virtual server would have been logged.

Simon.
0
 
Trevor LocalAuthor Commented:
thanks for your reply. do you recommend any third party auditing software?
0
 
SembeeCommented:
You are simply looking for something that can process the logs.
One of clients is using a GFI product called Event Log Manger (I think that is the name, I can't reach GFI's web site from this location) which seems to the job quite well.

Simon.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now