Solved

Auditing Outlook Meeting Request

Posted on 2014-12-15
2
169 Views
Last Modified: 2015-01-07
I got a ticket from a user today stating that she found a notification in her mailbox that a meeting request was accepted by her on 04/12/14. The user has delegate access to an executives mailbox and states that she didn't accept the request.

Is there a way to audit who accepted the meeting. The mailboxes are located on Exchange 2010
0
Comment
Question by:makel2
2 Comments
 
LVL 37

Accepted Solution

by:
Jian An Lim earned 500 total points
ID: 40501771
we need to check whether mailbox auditing is turn on before. It is not, then you won't able to track them.

 To find out,
 Exchange 2010 should be at least sp2.
then run
Get-Mailbox -Identity <user> | Format-List Audit*

if AuditEnabled is $false then you can't do much.
if it is $true then

Search-MailboxAuditLog -Identity <user> `
  -LogonTypes Delegate -ShowDetails -StartDate "MM/DD/YYYY" `
  -EndDate "mm/dd/yyyy" | ft Operation, OperationResult, `
  LogonUserDisplayName, ItemSubject, LastAccessed, -AutoSize






http://windowsitpro.com/exchange-server-2010/mailbox-auditing-exchange-server-2010
0
 
LVL 1

Expert Comment

by:Satyendra Tiwari
ID: 40502269
As said above, you need to enable auditing into exchange server that will let you track what’s happening with Exchange Server.  To configure auditing, you may follow the steps given in this helpful resource : http://technet.microsoft.com/en-us/magazine/dd547066.aspx
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
query all mailbox rules 5 28
exchange 13 21
exchange, office 365 13 33
exchange 2007 9 13
What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
The new Gmail Phishing Scam going around is surprising even the savviest of users with its sophisticated techniques.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question