<div>
I believe if you check the IIS web logs it details access attempts on there. <br />
<br />
If you suspect the user is trying to access his emails you could always disable the AD account, change the password, or disable OWA access to that account. <br />
<br />
It's worth checking if the account was used on a mobile phone at all and disable that access method to the account via exchange or if any other users have access to that mailbox.
</div>


I believe if you check the IIS web logs it details access attempts on there.

If you suspect the user is trying to access his emails you could always disable the AD account, change the password, or disable OWA access to that account.

It's worth checking if the account was used on a mobile phone at all and disable that access method to the account via exchange or if any other users have access to that mailbox.

<div>
Hi Andy,<br />
<br />
Account has been disabled for a week or so now, access has been disabled via OWA and mobile access sync is around the same time. ill check the IIS logs my worry is that the person that has left has the details of the account that is currently reviewing his emails for monitoring purposes. could I check the public IP address that's being used when attempting to log in,.
</div>


Hi Andy,

Account has been disabled for a week or so now, access has been disabled via OWA and mobile access sync is around the same time. ill check the IIS logs my worry is that the person that has left has the details of the account that is currently reviewing his emails for monitoring purposes. could I check the public IP address that's being used when attempting to log in,.

<div>
<div class="content wysiwyg-content">
How can I check what accounts are being logged into via OWA? an account I have removed permissions on (as they have left the business) is still showing the odd email as read and I want to ensure this is legit and not an intrusion.<br />
<br />
Thanks
</div>
</div>


How can I check what accounts are being logged into via OWA? an account I have removed permissions on (as they have left the business) is still showing the odd email as read and I want to ensure this is legit and not an intrusion.

Thanks

Exchange 2010 Monitoring

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

Exchange

Microsoft Outlook is a personal information manager from Microsoft, available as a part of the Microsoft Office suite. Although often used mainly as an email application, it also includes a calendar, task manager, contact manager, note-taker, journal, and web browser.