[Last Call] Learn how to a build a cloud-first strategyRegister Now


Exchange 2007 logging user activity

Posted on 2009-12-18
Medium Priority
Last Modified: 2012-05-08
We have a user who has sent an email we suspect from their PC, we need to prove whether this user sent the email from their PC or if someone else could have sent it using OWA, we can see the emails in the message tracking, however there doesn't seem to be any obvious suggestion of the method the email was sent.  This user has a MAPI connection to the exchange server and also has OWA access.
Is there any other log files I can check to see this information?

On a separate issue does exchange log when a user deletes an email?

Question by:bains1000
  • 2
LVL 74

Accepted Solution

Glen Knight earned 1000 total points
ID: 26084513
You could check the IIS logs for the time/date the message was sent to see if that user was accessing OWA ther than that there is no real way to find out.

Assisted Solution

maumen earned 1000 total points
ID: 26088434
Try examining the message header information.

Author Comment

ID: 26092613
the message header doesn't seem to give me too much infomation.
Is there any program I can use too read the IIS log files in a better format?

LVL 74

Expert Comment

by:Glen Knight
ID: 26092652

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to effectively resolve the number one email related issue received by helpdesks.
Stellar Exchange Toolkit: this 5 in 1 toolkit comes loaded with mega-software tool. Here’s an introduction to tools’ usage and advantages:
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
This video discusses moving either the default database or any database to a new volume.
Suggested Courses
Course of the Month18 days, 6 hours left to enroll

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question