Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Exchnage 2000 authentication logs

Posted on 2007-10-18
Medium Priority
Last Modified: 2011-04-14
Dear Experts,

We had a SPAM attack on our exchange server, someone sent SPAM emails using our exchnage 2000 server. I know the IP address of the person who sent those emails, however I would like to find out how this person authenticated to send those emails.
Where can I find this information and how?

Thank you,
Question by:rfinaly
  • 2
LVL 104

Expert Comment

ID: 20104255
There is only one account that they would have used unless a user has been careless - and that is the administrator account. No other accounts are attacked.
The only place that would be logged is in the SMTP Server logs, but that isn't enabled by default. You can look to see if it was on the SMTP virtual server in ESM, but if it isn't then there is unlikely to be anything to work on.


If your question has been answered, please remember to accept the answer and close the question.

Author Comment

ID: 20105600
Where do I find the SMTP logs? I just changed the administrator login a few weeks ago.
Also if the SMTP logs is not enable can you explain on how to enable.
Thank you,
LVL 104

Accepted Solution

Sembee earned 1500 total points
ID: 20108849
I said where the SMTP logs are enabled. On the SMTP virtual server.
ESM, Servers, <your server>, Protocols, SMTP. Right click on the SMTP VS and choose Properties. It is on the first tab.


If your question has been answered, please remember to accept the answer and close the question.

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this post, I will showcase the steps for how to create groups in Office 365. Office 365 groups allow for ease of flexibility and collaboration between staff members.
Exchange administrators are always vigilant about Exchange crashes and disasters that are possible any time. It is quite essential to identify the symptoms of a possible Exchange issue and be prepared with a proper recovery plan. There are multiple…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question