troubleshooting Question

Monitor IP address of users accessing outlook web access

Avatar of barnesm6
barnesm6 asked on
ExchangeSBS
9 Comments1 Solution5452 ViewsLast Modified:
I suspect that someone has acquired the password for a users account on my server and may be using it to remotely access the persons email via Outlook Web Access. I have set the user up with a temporary new user account while I look into this as I do not want to reset the password effectively locking the suspect out until I know for sure that this is the case.

What I need to find out is if there is any way to log the IP address of users that are accessing OWA and also the date and time they accessed a particular account. We have a standard sbs2003 server.
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 9 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 9 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros