Have an Exchange 2007 SP3 (SBS 2008 & fully patched) and I'm trying to audit OWA logins. I'm looking to get user mailbox & time, as well as IP address. I've turned on logging for Mailbox Login & Message Access, and I see it's logging Outlook, EAS, and OWA. It logs machine name & IP for Outlook, but for OWA it just logs the server (since OWA is hosted on the server). Is there a way to get more info? IIS maybe?