Auditing Exchange Account Accesses

How can you audit accesses to an exchange account in exchange 2003?  My CEO needs me to verify that his account hasn't been compromised.
SoteriaITAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
tigermattConnect With a Mentor Commented:

You need to enable auditing on the Exchange Server. If configured correctly, it will then make logs in the Event Viewer when a user accesses a mailbox which is not their own.
Be aware that it will generate a lot of entries in the Event Logs, and logging only takes place when it is enabled - you cannot search retrospectively before the feature was enabled.

The steps you need to take are described in detail in http://www.msexchange.org/tutorials/Auditing-Mailbox-Access-Exchange-System-Manager-Event-Viewer.html.

-Matt
0
 
SoteriaITAuthor Commented:
You as well.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.