[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

Getting SEND AS logging working

Posted on 2015-01-21
8
Medium Priority
?
38 Views
Last Modified: 2015-03-03
Got two mailbox servers. Set logging level for Extended Send As on both to Expert.

Both servers got rebooted last night.

Exchange Auditing log on server 1 is now showing entries for this, but nothing on server 2.

I created a test user to test this and gave my own user both send as and full access permissions. Then, I changed the from field in outlook to send as this user.

Nothing in exchange auditing log on either server. Its as if this logging level was never enabled. Checked setting and its there as expert.

One thing - as per previous question, I seem to be able to SEND AS any user which is a bit worrying. Just wondered if the fact Im domain admin makes a difference (and it doesnt log it).
0
Comment
Question by:paul williams
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
8 Comments
 
LVL 5

Expert Comment

by:Hello World
ID: 40561960
These logs are only available on DCs. All users’ permission data are stored in Active Directory. When setting permission to another user with manage full access permission, exchange server will connect to DC and then access Active Directory to modify the corresponding objects. If you successful changing the permission,  a Success Audit event log will be generated in DC. The event is located under  “Event Viewer\Security”.
0
 

Author Comment

by:paul williams
ID: 40562022
Nope. You are thinking about something else.
It definitely goes in exchange auditing log on actual exchange server.
0
 

Author Comment

by:paul williams
ID: 40566420
Still cant get it to log when I try to do a SEND AS ???

Anyone?
0
Veeam Task Manager for Hyper-V

Task Manager for Hyper-V provides critical information that allows you to monitor Hyper-V performance by displaying real-time views of CPU and memory at the individual VM-level, so you can quickly identify which VMs are using host resources.

 

Author Comment

by:paul williams
ID: 40570151
Turned all logging off over the weekend (Our exchange servers are set to reboot every night).
Then plan is to turn back on.

One thing - Im testing this as my user (which is domain admin and I appear to have complete send as rights to every mailbox). Is there any reason why this would not be logged (as opposed to send as from other user)?
0
 

Author Comment

by:paul williams
ID: 40605799
OK. Turned back on and Im getting Send As messages in the application log on the mailbox servers.

I've created a test user and given my normal user full rights. Then I've used outlook changed the FROM field and sent a test message. Nothing in the event log.

Any ideas? Im domain admin and got rights, it seems to be every mailbox but surely it should still get logged?
0
 

Author Comment

by:paul williams
ID: 40619169
Seems to work for everyone else but not for my user? Strange.
0
 

Accepted Solution

by:
paul williams earned 0 total points
ID: 40625435
All working now for some reason. I guess stoppong logging and turning back on has solved it.
0
 

Author Closing Comment

by:paul williams
ID: 40641412
No other advice offered.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are times when we need to generate a report on the inbox rules, where users have set up forwarding externally in their mailbox. In this article, I will be sharing a script I wrote to generate the report in CSV format.
The main intent of this article is to make you aware of ‘Exchange fail to mount’ error, its effects, causes, and solution.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question