?
Solved

Exchange Folder and User Logon Auditing 2007

Posted on 2011-03-23
3
Medium Priority
?
377 Views
Last Modified: 2012-05-11
We have an Exchange Server we upgraded from 2003.
I want to track\audit users logons and folder access.

So I setup to the reg keys for 9074 Folder Access and 9015 Logons.

I set the value to low hex = 1

Cool I am getting events in the Application folder. I confirm the level of auditing is set to low,
but wow the number of events is huge. I am going to need a very large event file to keep from
events wrapping even for a day...

The problem is, all the "Success Audit" entries are flooding the Application log...

So my questions is this; can I set Exchange such that those events log to a separate log?
That way I am not rolling the application event log so frequently....

Any help greatly appreciated.
0
Comment
Question by:CyberPoke101
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 49

Accepted Solution

by:
Akhater earned 2000 total points
ID: 35222774
UnfortunAtely not, you can use another tools to consolidate and archive these logs like scom
0
 
LVL 74

Expert Comment

by:Glen Knight
ID: 37445866
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
The viewer will learn how to create two correlated normally distributed random variables in Excel, use a normal distribution to simulate the return on different levels of investment in each of the two funds over a period of ten years, and, create a …
how to add IIS SMTP to handle application/Scanner relays into office 365.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question