?
Solved

Want to search logs to find out who changed Virtual SMTP server settings

Posted on 2007-04-04
5
Medium Priority
?
200 Views
Last Modified: 2010-04-18
hello

I discovered some settings in my default Virtual SMTP server in Exchange 2003. I know I did not put them in there, and I'd like to find out who did (other admins). Anyone know which logs I should check to find this information? I have Win2k3 domain.

thanks in advance
0
Comment
Question by:Trevor Local
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 1000 total points
ID: 18855740
how heavily are you auditing exchange? i 99% sure it wont turn up in the server logs...
0
 

Author Comment

by:Trevor Local
ID: 18856031
I do not know what auditing is currently set.
0
 
LVL 104

Expert Comment

by:Sembee
ID: 18856423
If you are auditing the server then your event logs will be full of things happening. With auditing enabled the event logs become close to useless, which is why if you are running auditing you should use a third party tool to process the logs.

However even with auditing enabled I doubt whether a change to the SMTP virtual server would have been logged.

Simon.
0
 

Author Comment

by:Trevor Local
ID: 18858661
thanks for your reply. do you recommend any third party auditing software?
0
 
LVL 104

Assisted Solution

by:Sembee
Sembee earned 1000 total points
ID: 18858938
You are simply looking for something that can process the logs.
One of clients is using a GFI product called Event Log Manger (I think that is the name, I can't reach GFI's web site from this location) which seems to the job quite well.

Simon.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
Suggested Courses
Course of the Month9 days, 1 hour left to enroll

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question