I'm trying to find out who is looking at other people's mailboxes in our environment. We are using Exchange Server 2003. Unfortunately permissions are in bad shape and most people can open up anyone elses mailbox.
The best article I could find was here: http://support.microsoft.com/kb/867640
I tried looking at the "Application Event Log", but that is useless because of the limitations an event for someone views another persons calendar is the same as someone opening another persons email inbox.
What I do like is looking at the Mailbox Resources that it refers to in the document at the link above.
Where do I find "Mailbox Resources"?
Is there a better way to find out who is viewing other mailboxes?
Also, what about OWA. Does Exchange keep a connection log matching up mailboxes to the IP address accessed from?
I do have auditing turned on.