Solved

Want to search logs to find out who changed Virtual SMTP server settings

Posted on 2007-04-04
5
192 Views
Last Modified: 2010-04-18
hello

I discovered some settings in my default Virtual SMTP server in Exchange 2003. I know I did not put them in there, and I'd like to find out who did (other admins). Anyone know which logs I should check to find this information? I have Win2k3 domain.

thanks in advance
0
Comment
Question by:Trevor Local
  • 2
  • 2
5 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 250 total points
Comment Utility
how heavily are you auditing exchange? i 99% sure it wont turn up in the server logs...
0
 

Author Comment

by:Trevor Local
Comment Utility
I do not know what auditing is currently set.
0
 
LVL 104

Expert Comment

by:Sembee
Comment Utility
If you are auditing the server then your event logs will be full of things happening. With auditing enabled the event logs become close to useless, which is why if you are running auditing you should use a third party tool to process the logs.

However even with auditing enabled I doubt whether a change to the SMTP virtual server would have been logged.

Simon.
0
 

Author Comment

by:Trevor Local
Comment Utility
thanks for your reply. do you recommend any third party auditing software?
0
 
LVL 104

Assisted Solution

by:Sembee
Sembee earned 250 total points
Comment Utility
You are simply looking for something that can process the logs.
One of clients is using a GFI product called Event Log Manger (I think that is the name, I can't reach GFI's web site from this location) which seems to the job quite well.

Simon.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Easy CSR creation in Exchange 2007,2010 and 2013
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now