Multiple users sharing a mailbox - how to track user actions?

Posted on 2010-11-22
Medium Priority
Last Modified: 2012-05-10
I'm running Exchange 2010. I have a mailbox that 3 different people log into and use as a shared mailbox. It suites the purpose well.

The only issue I have is, if a user deletes or moves and email into a folder that they shouldn't touch, I can't tell who did the move or change? Does anyone know of a way of tracking this?
Question by:adovski
LVL 28

Accepted Solution

sunnyc7 earned 500 total points
ID: 34193654
You can do this by enabling audit logs.
Set-Mailbox -Identity "Ben Smith" -AuditEnabled $true

Check these links:

In your case, since multiple people are logging in as "Ben Smith" the only thing you can do, is match audit logs with login time of that particular person.

You can also look at Diagnostic logging (2007 version doc)
LVL 17

Assisted Solution

OriNetworks earned 500 total points
ID: 34193831
Auditing is the exact solution but hopefully each user has their own account and the one mailbox delegated to them so you can track who instead of having all 3 log in with one account.

Author Closing Comment

ID: 34229440
Wasn't a complete solution, but helped point the way.

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

The Exchange database may sometimes fail to mount owing to various technical reasons. A dismounted EDB file can be the source of many Exchange errors including mailbox inaccessibility for users. Resolving the root cause of mounting problems becomes …
There’s hardly a doubt that Business Communication is indispensable for both enterprises and small businesses, and if there is an email system outage owing to Exchange server failure, it definitely results in loss of productivity.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question