Want to enable logging so that every time a user does a SEND AS it gets logged.
Have got two mailbox servers, and two hub transport/client access.
Looking at one of the mailbox servers, in "manage diagnostic logging properties", I can see MSExchangeIS.
In that there is 9000 Private and 9000 Public.
Both have SEND AS.
1. Do I need to set to EXPERT level for both 9000 Prvate and 9000 Public?
2. Which servers? Just mailbox or all of them?