Solved

Exchange server mailbox analyser

Posted on 2014-01-15
2
438 Views
Last Modified: 2014-01-16
Hello everyone,

We want to get more insight in our exchange mailboxes.

Does anyone know how we can visualize the following things:

-      Analyze who logs into the server at what time with what device and wht IP (full statistics on this; per day/hour/etc.)
Security wise, some people have access to other people’s mailbox and they login; would be good to know how many times this happens
-      Further interesting statistics:
o      at what times do people logon in the morning on the workstation and what time they logout
o      What time is the first last email sent and what time the last sent per day
o      How many emails/day/person received, how many sent.

Thanks in advance!
0
Comment
Question by:wilbertkramer
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 400 total points
ID: 39783627
What you want is available, but it isn't free (unless you want to analyse the large amount of logs that are involved). Something like Quest Message Stats will give you everything you want to know about Exchange.

You would have to capture logs from all Exchange servers, domain controllers. You would need to have diagnostic logging turned up. You would probably also need to capture logs from the workstations, because Windows doesn't always log in "live", it often uses cached information. The general information isn't stored in the domain, and where it is, it is specific to that server, so you have to look across the board.

Unless you have the skills in house to manage the logs, reports etc, then you will need to look at third party tools.

Simon.
0
 
LVL 4

Assisted Solution

by:michaelalphi
michaelalphi earned 100 total points
ID: 39784686
you can use this command to have a try If you want to enable all the mailbox audit logging in Exchange 2010:
$mailbox=get-mailbox –ResultSize unlimited
$mailbox| foreach{set-mailbox –identity $_.Name –AuditEnabled $true}

Get more help from :
http://technet.microsoft.com/en-us/library/ff461937.aspx

For the alerts, you will have to consider any good tool which can monitor such events and send you alerts as and when anything goes wrong. As a reference, you can have a look on these exchange solutions.
0

Featured Post

[Webinar] How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes how to import an Outlook PST file to Office 365 using a third party product to avoid Microsoft's Azure command line tool, saving you time.
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
how to add IIS SMTP to handle application/Scanner relays into office 365.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question