Solved

Getting SEND AS logging working

Posted on 2015-01-21
8
30 Views
Last Modified: 2015-03-03
Got two mailbox servers. Set logging level for Extended Send As on both to Expert.

Both servers got rebooted last night.

Exchange Auditing log on server 1 is now showing entries for this, but nothing on server 2.

I created a test user to test this and gave my own user both send as and full access permissions. Then, I changed the from field in outlook to send as this user.

Nothing in exchange auditing log on either server. Its as if this logging level was never enabled. Checked setting and its there as expert.

One thing - as per previous question, I seem to be able to SEND AS any user which is a bit worrying. Just wondered if the fact Im domain admin makes a difference (and it doesnt log it).
0
Comment
Question by:paul williams
  • 7
8 Comments
 
LVL 5

Expert Comment

by:Hello World
ID: 40561960
These logs are only available on DCs. All users’ permission data are stored in Active Directory. When setting permission to another user with manage full access permission, exchange server will connect to DC and then access Active Directory to modify the corresponding objects. If you successful changing the permission,  a Success Audit event log will be generated in DC. The event is located under  “Event Viewer\Security”.
0
 

Author Comment

by:paul williams
ID: 40562022
Nope. You are thinking about something else.
It definitely goes in exchange auditing log on actual exchange server.
0
 

Author Comment

by:paul williams
ID: 40566420
Still cant get it to log when I try to do a SEND AS ???

Anyone?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:paul williams
ID: 40570151
Turned all logging off over the weekend (Our exchange servers are set to reboot every night).
Then plan is to turn back on.

One thing - Im testing this as my user (which is domain admin and I appear to have complete send as rights to every mailbox). Is there any reason why this would not be logged (as opposed to send as from other user)?
0
 

Author Comment

by:paul williams
ID: 40605799
OK. Turned back on and Im getting Send As messages in the application log on the mailbox servers.

I've created a test user and given my normal user full rights. Then I've used outlook changed the FROM field and sent a test message. Nothing in the event log.

Any ideas? Im domain admin and got rights, it seems to be every mailbox but surely it should still get logged?
0
 

Author Comment

by:paul williams
ID: 40619169
Seems to work for everyone else but not for my user? Strange.
0
 

Accepted Solution

by:
paul williams earned 0 total points
ID: 40625435
All working now for some reason. I guess stoppong logging and turning back on has solved it.
0
 

Author Closing Comment

by:paul williams
ID: 40641412
No other advice offered.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
In this video we show how to create a User Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Mailb…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question