Solved

Mailbox Audit Exchange 2010

Posted on 2014-11-25
7
288 Views
Last Modified: 2014-12-01
Hi

I have CEO and it seems someone is accessing his email through an application or web browser - i would like to know how to get a report of who or what time is certain contacts where delete "Suggested Contacts"

i would like to see as much information as possible senior exchange engineer says exchange audit is enable just need the powershell commands.
0
Comment
Question by:Jorge Ocampo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 7

Expert Comment

by:Satyendra Sharma
ID: 40465587
0
 
LVL 2

Author Comment

by:Jorge Ocampo
ID: 40465598
@satyendra mailbox auditing is already enable
0
 
LVL 7

Expert Comment

by:Satyendra Sharma
ID: 40465610
Then you should be able to look for activities by search-mailboxauditlog command
http://technet.microsoft.com/en-us/library/ff522360(v=exchg.141).aspx
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 2

Author Comment

by:Jorge Ocampo
ID: 40465614
Search-MailboxSearch-MailboxAuditLog : The term 'Search-MailboxSearch-MailboxAuditLog' is not recognized as the name of
 a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verif
y that the path is correct and try again.
0
 
LVL 7

Expert Comment

by:Satyendra Sharma
ID: 40465619
Search-MailboxAuditLog -Identity "CEO's Mailbox" -LogonTypes Admin,Delegate -StartDate x/x/xxxx -EndDate x/x/xxxx -ResultSize 2000
0
 
LVL 2

Author Comment

by:Jorge Ocampo
ID: 40465652
"search-mailboxauditlog" is not recognized do i need to get a module?
0
 
LVL 7

Accepted Solution

by:
Satyendra Sharma earned 500 total points
ID: 40465667
You need to have 'Organization management' or 'Records Management' permissions to execute the command.
http://technet.microsoft.com/en-us/library/dd638205(v=exchg.141).aspx
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
Let's recap what we learned from yesterday's Skyport Systems webinar.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question