Solved

Exchange server mailbox analyser

Posted on 2014-01-15
2
434 Views
Last Modified: 2014-01-16
Hello everyone,

We want to get more insight in our exchange mailboxes.

Does anyone know how we can visualize the following things:

-      Analyze who logs into the server at what time with what device and wht IP (full statistics on this; per day/hour/etc.)
Security wise, some people have access to other people’s mailbox and they login; would be good to know how many times this happens
-      Further interesting statistics:
o      at what times do people logon in the morning on the workstation and what time they logout
o      What time is the first last email sent and what time the last sent per day
o      How many emails/day/person received, how many sent.

Thanks in advance!
0
Comment
Question by:wilbertkramer
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 400 total points
ID: 39783627
What you want is available, but it isn't free (unless you want to analyse the large amount of logs that are involved). Something like Quest Message Stats will give you everything you want to know about Exchange.

You would have to capture logs from all Exchange servers, domain controllers. You would need to have diagnostic logging turned up. You would probably also need to capture logs from the workstations, because Windows doesn't always log in "live", it often uses cached information. The general information isn't stored in the domain, and where it is, it is specific to that server, so you have to look across the board.

Unless you have the skills in house to manage the logs, reports etc, then you will need to look at third party tools.

Simon.
0
 
LVL 4

Assisted Solution

by:michaelalphi
michaelalphi earned 100 total points
ID: 39784686
you can use this command to have a try If you want to enable all the mailbox audit logging in Exchange 2010:
$mailbox=get-mailbox –ResultSize unlimited
$mailbox| foreach{set-mailbox –identity $_.Name –AuditEnabled $true}

Get more help from :
http://technet.microsoft.com/en-us/library/ff461937.aspx

For the alerts, you will have to consider any good tool which can monitor such events and send you alerts as and when anything goes wrong. As a reference, you can have a look on these exchange solutions.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
CodeTwo Sync for iCloud (http://www.codetwo.com/sync-for-icloud?sts=6554) automatically synchronizes your Outlook 2016, 2013, 2010 or 2007 folders with iCloud folders available via iCloud Control Panel. This lets you automatically sync them with…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question