Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 198
  • Last Modified:

Auditing Exchange Account Accesses

How can you audit accesses to an exchange account in exchange 2003?  My CEO needs me to verify that his account hasn't been compromised.
0
SoteriaIT
Asked:
SoteriaIT
1 Solution
 
SoteriaITAuthor Commented:
You as well.
0
 
tigermattCommented:

You need to enable auditing on the Exchange Server. If configured correctly, it will then make logs in the Event Viewer when a user accesses a mailbox which is not their own.
Be aware that it will generate a lot of entries in the Event Logs, and logging only takes place when it is enabled - you cannot search retrospectively before the feature was enabled.

The steps you need to take are described in detail in http://www.msexchange.org/tutorials/Auditing-Mailbox-Access-Exchange-System-Manager-Event-Viewer.html.

-Matt
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now