Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


External User Tracking

Posted on 2011-05-06
Medium Priority
Last Modified: 2012-05-11
I am recently charged with handling IT in a small office.  I would like to find out if there is a way within Exchange to view connections which generated from outside our IP range.

For example, if a former employee tried to log in to another users profile, or perhaps tried to log in to our database.

I know there is a way to do this but I am unfortunatly not well equipped to solve the problem myself.  I am using IPCop as a firewall and Ecahange 2003 SBS.
Question by:mat7355
  • 5
  • 3

Expert Comment

ID: 35706198
How would they be accessing the exchange server via OWA, Outlook Anywhere, Pop, IMAP?  There are log files you can look at for the web services.

Author Comment

ID: 35706368
For example, we use remote.domain.com/remote

or, we have a database program called PCR which can be accessed through pcr.domain.com

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.


Author Comment

ID: 35724190
Sorry to be inactive.  From the link...

"Please look at the IIS logs for the OWA login attempts and IP Address on the CAS server"

How do I do that?  What menu in exchange i mean?

Thanks for helping a new guy!

Accepted Solution

steinmto earned 2000 total points
ID: 35724278
The log files are just text files loccated in C:\windows\system32\logfiles.  The should list the ip address of the users connecting to owa.

Expert Comment

ID: 35724282
The directory you are looking for in logfiles should be listed like.
w3svc1 or w3svc2 or w3svc3.

Author Closing Comment

ID: 36418695
Thanks!! Sorry for late feedback!

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have come across a situation where you need to find some EDB mailbox recovery techniques, then here you will find the same. In this article, we will take you through three techniques using which you will be able to perform EDB recovery. You …
Mailbox Corruption is a nightmare every Exchange DBA wishes he never has. Recovering from it can be super-hectic if not entirely futile. And though techniques like the New-MailboxRepairRequest cmdlet have been designed to help with fixing minor corr…
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
Suggested Courses

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question