Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 45
  • Last Modified:

Getting SEND AS logging working

Got two mailbox servers. Set logging level for Extended Send As on both to Expert.

Both servers got rebooted last night.

Exchange Auditing log on server 1 is now showing entries for this, but nothing on server 2.

I created a test user to test this and gave my own user both send as and full access permissions. Then, I changed the from field in outlook to send as this user.

Nothing in exchange auditing log on either server. Its as if this logging level was never enabled. Checked setting and its there as expert.

One thing - as per previous question, I seem to be able to SEND AS any user which is a bit worrying. Just wondered if the fact Im domain admin makes a difference (and it doesnt log it).
0
paul williams
Asked:
paul williams
  • 7
1 Solution
 
Hello WorldCommented:
These logs are only available on DCs. All users’ permission data are stored in Active Directory. When setting permission to another user with manage full access permission, exchange server will connect to DC and then access Active Directory to modify the corresponding objects. If you successful changing the permission,  a Success Audit event log will be generated in DC. The event is located under  “Event Viewer\Security”.
0
 
paul williamsAuthor Commented:
Nope. You are thinking about something else.
It definitely goes in exchange auditing log on actual exchange server.
0
 
paul williamsAuthor Commented:
Still cant get it to log when I try to do a SEND AS ???

Anyone?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
paul williamsAuthor Commented:
Turned all logging off over the weekend (Our exchange servers are set to reboot every night).
Then plan is to turn back on.

One thing - Im testing this as my user (which is domain admin and I appear to have complete send as rights to every mailbox). Is there any reason why this would not be logged (as opposed to send as from other user)?
0
 
paul williamsAuthor Commented:
OK. Turned back on and Im getting Send As messages in the application log on the mailbox servers.

I've created a test user and given my normal user full rights. Then I've used outlook changed the FROM field and sent a test message. Nothing in the event log.

Any ideas? Im domain admin and got rights, it seems to be every mailbox but surely it should still get logged?
0
 
paul williamsAuthor Commented:
Seems to work for everyone else but not for my user? Strange.
0
 
paul williamsAuthor Commented:
All working now for some reason. I guess stoppong logging and turning back on has solved it.
0
 
paul williamsAuthor Commented:
No other advice offered.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 7
Tackle projects and never again get stuck behind a technical roadblock.
Join Now