Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Mailbox Audit Exchange 2010

Posted on 2014-11-25
7
Medium Priority
?
297 Views
Last Modified: 2014-12-01
Hi

I have CEO and it seems someone is accessing his email through an application or web browser - i would like to know how to get a report of who or what time is certain contacts where delete "Suggested Contacts"

i would like to see as much information as possible senior exchange engineer says exchange audit is enable just need the powershell commands.
0
Comment
Question by:Jorge Ocampo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 7

Expert Comment

by:Satyendra Sharma
ID: 40465587
0
 
LVL 2

Author Comment

by:Jorge Ocampo
ID: 40465598
@satyendra mailbox auditing is already enable
0
 
LVL 7

Expert Comment

by:Satyendra Sharma
ID: 40465610
Then you should be able to look for activities by search-mailboxauditlog command
http://technet.microsoft.com/en-us/library/ff522360(v=exchg.141).aspx
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 2

Author Comment

by:Jorge Ocampo
ID: 40465614
Search-MailboxSearch-MailboxAuditLog : The term 'Search-MailboxSearch-MailboxAuditLog' is not recognized as the name of
 a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verif
y that the path is correct and try again.
0
 
LVL 7

Expert Comment

by:Satyendra Sharma
ID: 40465619
Search-MailboxAuditLog -Identity "CEO's Mailbox" -LogonTypes Admin,Delegate -StartDate x/x/xxxx -EndDate x/x/xxxx -ResultSize 2000
0
 
LVL 2

Author Comment

by:Jorge Ocampo
ID: 40465652
"search-mailboxauditlog" is not recognized do i need to get a module?
0
 
LVL 7

Accepted Solution

by:
Satyendra Sharma earned 2000 total points
ID: 40465667
You need to have 'Organization management' or 'Records Management' permissions to execute the command.
http://technet.microsoft.com/en-us/library/dd638205(v=exchg.141).aspx
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are times when we need to generate a report on the inbox rules, where users have set up forwarding externally in their mailbox. In this article, I will be sharing a script I wrote to generate the report in CSV format.
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question