?
Solved

Exchange Folder and User Logon Auditing 2007

Posted on 2011-03-23
3
Medium Priority
?
386 Views
Last Modified: 2012-05-11
We have an Exchange Server we upgraded from 2003.
I want to track\audit users logons and folder access.

So I setup to the reg keys for 9074 Folder Access and 9015 Logons.

I set the value to low hex = 1

Cool I am getting events in the Application folder. I confirm the level of auditing is set to low,
but wow the number of events is huge. I am going to need a very large event file to keep from
events wrapping even for a day...

The problem is, all the "Success Audit" entries are flooding the Application log...

So my questions is this; can I set Exchange such that those events log to a separate log?
That way I am not rolling the application event log so frequently....

Any help greatly appreciated.
0
Comment
Question by:CyberPoke101
2 Comments
 
LVL 49

Accepted Solution

by:
Akhater earned 2000 total points
ID: 35222774
UnfortunAtely not, you can use another tools to consolidate and archive these logs like scom
0
 
LVL 74

Expert Comment

by:Glen Knight
ID: 37445866
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Are you working to mount the dismounted Exchange 2013 database? Then the best course of action is to analyze the causes of Database issue, their probable solutions and decide for the appropriate course of action.
How to import Outlook calendar to MS Exchange Server. A Calendar stores user appointments, meetings details to manage work. Moving Outlook Calendar to a new or already existing Exchange Server become complex process if Admin needs to import Calendar…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…

569 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question