Getting SEND AS logging working

Got two mailbox servers. Set logging level for Extended Send As on both to Expert.

Both servers got rebooted last night.

Exchange Auditing log on server 1 is now showing entries for this, but nothing on server 2.

I created a test user to test this and gave my own user both send as and full access permissions. Then, I changed the from field in outlook to send as this user.

Nothing in exchange auditing log on either server. Its as if this logging level was never enabled. Checked setting and its there as expert.

One thing - as per previous question, I seem to be able to SEND AS any user which is a bit worrying. Just wondered if the fact Im domain admin makes a difference (and it doesnt log it).
paul williamsAsked:
Who is Participating?
 
paul williamsAuthor Commented:
All working now for some reason. I guess stoppong logging and turning back on has solved it.
0
 
Hello WorldCommented:
These logs are only available on DCs. All users’ permission data are stored in Active Directory. When setting permission to another user with manage full access permission, exchange server will connect to DC and then access Active Directory to modify the corresponding objects. If you successful changing the permission,  a Success Audit event log will be generated in DC. The event is located under  “Event Viewer\Security”.
0
 
paul williamsAuthor Commented:
Nope. You are thinking about something else.
It definitely goes in exchange auditing log on actual exchange server.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
paul williamsAuthor Commented:
Still cant get it to log when I try to do a SEND AS ???

Anyone?
0
 
paul williamsAuthor Commented:
Turned all logging off over the weekend (Our exchange servers are set to reboot every night).
Then plan is to turn back on.

One thing - Im testing this as my user (which is domain admin and I appear to have complete send as rights to every mailbox). Is there any reason why this would not be logged (as opposed to send as from other user)?
0
 
paul williamsAuthor Commented:
OK. Turned back on and Im getting Send As messages in the application log on the mailbox servers.

I've created a test user and given my normal user full rights. Then I've used outlook changed the FROM field and sent a test message. Nothing in the event log.

Any ideas? Im domain admin and got rights, it seems to be every mailbox but surely it should still get logged?
0
 
paul williamsAuthor Commented:
Seems to work for everyone else but not for my user? Strange.
0
 
paul williamsAuthor Commented:
No other advice offered.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.