Jorge Ocampo
asked on
Mailbox Audit Exchange 2010
Hi
I have CEO and it seems someone is accessing his email through an application or web browser - i would like to know how to get a report of who or what time is certain contacts where delete "Suggested Contacts"
i would like to see as much information as possible senior exchange engineer says exchange audit is enable just need the powershell commands.
I have CEO and it seems someone is accessing his email through an application or web browser - i would like to know how to get a report of who or what time is certain contacts where delete "Suggested Contacts"
i would like to see as much information as possible senior exchange engineer says exchange audit is enable just need the powershell commands.
ASKER
@satyendra mailbox auditing is already enable
Then you should be able to look for activities by search-mailboxauditlog command
http://technet.microsoft.com/en-us/library/ff522360(v=exchg.141).aspx
http://technet.microsoft.com/en-us/library/ff522360(v=exchg.141).aspx
ASKER
Search-MailboxSearch-Mailb oxAuditLog : The term 'Search-MailboxSearch-Mail boxAuditLo g' is not recognized as the name of
a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verif
y that the path is correct and try again.
a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verif
y that the path is correct and try again.
Search-MailboxAuditLog -Identity "CEO's Mailbox" -LogonTypes Admin,Delegate -StartDate x/x/xxxx -EndDate x/x/xxxx -ResultSize 2000
ASKER
"search-mailboxauditlog" is not recognized do i need to get a module?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
http://technet.microsoft.com/en-us/library/ff459237(v=exchg.141).aspx
http://technet.microsoft.com/en-us/library/ff461939(v=exchg.141).aspx