The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.
One of a set of tools we're offering as a way of saying thank you for being a part of the community.
Solved
Exchange 2003 mailbox shows administrator as last logged on
Posted on 2013-01-03
As I was cleaning up the exchange, I am looking in ESM / mail store and i discovered that many users show last "logged on by" the domain administrator - myself.
I obviously did not log on at all. I don't know the reason why this is showing. Can it be that I have Symantec backup exec backing up the information store and in turn cause this?
please help. I hope this isn't a security concern.
Tx
I obviously did not log on at all. I don't know the reason why this is showing. Can it be that I have Symantec backup exec backing up the information store and in turn cause this?
please help. I hope this isn't a security concern.
Tx
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
3-
2
5 Comments
If the name is one of your other users, it may be because that user tried to access the other user's calendar. I am pretty sure that Exchange System Manager is showing you "access attempts", though and not actual accesses and in your case if you're using the domain admin account for backupexec then that should be the reason
It could also be someone opening another user's calendar through Outlook, for example. If it is 2 people that don't work together or it is people that should not be trying to open the boss' calendar, then you should probably investigate.
It could also be someone opening another user's calendar through Outlook, for example. If it is 2 people that don't work together or it is people that should not be trying to open the boss' calendar, then you should probably investigate.
i forgot to mention that the "access attempts" are identical. I've seen a few topics online with respect to another user showing up. But in my case its the domain admin. Check it out:
As I said earlier its just the access attempts could be for backups or other activities like calendar opening for other user
If still worried then check the backup times and verify it with the account access
If still worried then check the backup times and verify it with the account access
its possible that the backup times are causing this...but then again i have other users who still show that the domain admin last attempted to access the mailbox, however it shows that this occurred 6 years ago..example...2007, some 2009...
i only submitted a portion of a screenshot to show some that were accessed simultaneously.
thx again..
i only submitted a portion of a screenshot to show some that were accessed simultaneously.
thx again..
In that case you could check the Local Security event log which will tell you who and when, a given user logged on to the Exchange server. The Domain Controller Security event log will tell you who logged on to a specific mailbox and when they did so.
You could also use exchange mailbox auditing using this Microsoft article
http://technet.microsoft.com/en-us/library/ff461937.aspx
There are variety of users who access mailbox for again a variety of reasons from backups, antivirus scans to calendar and day to day email tasks. Now what happened in the past is all speculations-as we can't research much on that, but for future you could enable auditing at the maibox level using this article-
http://technet.microsoft.com/en-us/library/ff461937.aspx
You could also use exchange mailbox auditing using this Microsoft article
http://technet.microsoft.com/en-us/library/ff461937.aspx
There are variety of users who access mailbox for again a variety of reasons from backups, antivirus scans to calendar and day to day email tasks. Now what happened in the past is all speculations-as we can't research much on that, but for future you could enable auditing at the maibox level using this article-
http://technet.microsoft.com/en-us/library/ff461937.aspx
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
On September 18, Experts Exchange launched the first installment of the Help Bell, a new feature for Premium Members, Team Accounts, and Qualified Experts. The Help Bell will serve as an additional tool to help teams increase question visibility.
how to add IIS SMTP to handle application/Scanner relays into office 365.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync.
To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
Suggested Courses
Course of the Month8 days, 9 hours left to enroll
721 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.