Solved

Getting SEND AS logging working

Posted on 2015-01-21
8
28 Views
Last Modified: 2015-03-03
Got two mailbox servers. Set logging level for Extended Send As on both to Expert.

Both servers got rebooted last night.

Exchange Auditing log on server 1 is now showing entries for this, but nothing on server 2.

I created a test user to test this and gave my own user both send as and full access permissions. Then, I changed the from field in outlook to send as this user.

Nothing in exchange auditing log on either server. Its as if this logging level was never enabled. Checked setting and its there as expert.

One thing - as per previous question, I seem to be able to SEND AS any user which is a bit worrying. Just wondered if the fact Im domain admin makes a difference (and it doesnt log it).
0
Comment
Question by:paul williams
  • 7
8 Comments
 
LVL 5

Expert Comment

by:Hello World
ID: 40561960
These logs are only available on DCs. All users’ permission data are stored in Active Directory. When setting permission to another user with manage full access permission, exchange server will connect to DC and then access Active Directory to modify the corresponding objects. If you successful changing the permission,  a Success Audit event log will be generated in DC. The event is located under  “Event Viewer\Security”.
0
 

Author Comment

by:paul williams
ID: 40562022
Nope. You are thinking about something else.
It definitely goes in exchange auditing log on actual exchange server.
0
 

Author Comment

by:paul williams
ID: 40566420
Still cant get it to log when I try to do a SEND AS ???

Anyone?
0
 

Author Comment

by:paul williams
ID: 40570151
Turned all logging off over the weekend (Our exchange servers are set to reboot every night).
Then plan is to turn back on.

One thing - Im testing this as my user (which is domain admin and I appear to have complete send as rights to every mailbox). Is there any reason why this would not be logged (as opposed to send as from other user)?
0
Why spend so long doing email signature updates?

Do you spend loads of your time carrying out email signature updates? Not very interesting are they? Don’t let signature updates get you down. Let Exclaimer Cloud - Signatures for Office 365 make managing email signatures a breeze.

 

Author Comment

by:paul williams
ID: 40605799
OK. Turned back on and Im getting Send As messages in the application log on the mailbox servers.

I've created a test user and given my normal user full rights. Then I've used outlook changed the FROM field and sent a test message. Nothing in the event log.

Any ideas? Im domain admin and got rights, it seems to be every mailbox but surely it should still get logged?
0
 

Author Comment

by:paul williams
ID: 40619169
Seems to work for everyone else but not for my user? Strange.
0
 

Accepted Solution

by:
paul williams earned 0 total points
ID: 40625435
All working now for some reason. I guess stoppong logging and turning back on has solved it.
0
 

Author Closing Comment

by:paul williams
ID: 40641412
No other advice offered.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now