exchange, mailbox

how can I found who last logged into the mailbox (shared mailbox)

like 5000 mails were unread suddenly
pramod1Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Wayne88Commented:
What version of Exchange?

"In Exchange Server 2003 the last logon time for a mailbox was visible in the Exchange System Manager.  For Exchange Server 2007 and 2010 the last logon time was removed from the Exchange Management Console, and so we need to use a differnet method to find this information."

https://practical365.com/exchange-server/last-logon-time-exchange-2010-mailbox-users/
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
pramod1Author Commented:
exchange 2010 enterprise
0
Wayne88Commented:
Use theGet-MailboxStatistics cmdlet in the Exchange Management Shell
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

pramod1Author Commented:
if mailbox name is im connect, what command should I use
0
Wayne88Commented:
How many users do you have?  If not many, just use theGet-MailboxStatistics it will show all then look for the shared mailbox name.
0
pramod1Author Commented:
NO I NEED TO see who logged into the mail box, what command should I use
0
Wayne88Commented:
Get-MailboxStatistics "Shared Mailbox Name"

Do you know the name of the shared mailbox?
0
pramod1Author Commented:
Get-MailboxStatistics -IMCONNECTSETUP@DOMAIN.COM | Sort LastLogonTime -Descending- IS NOT WORKING
0
pramod1Author Commented:
Yes I pinged above
0
Wayne88Commented:
Actually, not sure if Get-MailboxStatistics will work with sharedmailbox because users can’t log into it them directly.  Sorry, let me do some more testing.
0
FOXActive Directory/Exchange EngineerCommented:
Try

Get-MailboxStatistics 'emailaddressofsharedmailbox' | Select *log*
0
Wayne88Commented:
Did you have mailbox auditing enabled?  Use Get-Mailbox SharedMailBox | fl *audit*

If false then you won't have that history.  You will have to enabled it first.

https://community.spiceworks.com/how_to/120006-how-to-monitor-who-accessed-a-shared-mailbox
0
pramod1Author Commented:
IT JUST SAYS LOG OFF TIME
0
Wayne88Commented:
Use Get-Mailbox SharedMailBox | fl *audit* to check if mailbox auditing is enabled.  It's disabled by default.

Replace SharedMailBox with actual name
0
pramod1Author Commented:
I NEED TO CHECK who logged bwteen 9 and 11am today
0
FOXActive Directory/Exchange EngineerCommented:
What version of exchange are you using? Please list that when opening questions
0
pramod1Author Commented:
can I just found who logged
0
pramod1Author Commented:
sorry exchange 2010 sp3
0
pramod1Author Commented:
I just need to know who emails were unread and who logged in today
0
Wayne88Commented:
Won't be possible to trace who accessed the shared mailbox earlier today without mailbox auditing enabled.  By default, the mail box audit is disabled.

https://www.netwrix.com/how_to_monitor_who_accessed_shared_mailbox.html

Get-MailboxStatistics cmdlet will only show the last logon time
0
pramod1Author Commented:
SO there is no command shell to find who logged
0
FOXActive Directory/Exchange EngineerCommented:
Try

Get-LogonStatistics 'emailaddressofthesharedMailbox'
0
pramod1Author Commented:
I ONLY GOT SERVER NAME
0
Kurt JohnsonTechnical ManagerCommented:
Hi,
Until you have auditing pre-enabled, you can't see who has done what in your environment.
You must enable auditing in order to fetch these reports and find the real culprit.
Below guide containing step by step details to enable shared mailbox auditing and track every critical changes at granular level - https://www.codetwo.com/admins-blog/user-mailbox-and-shared-mailbox-auditing-in-exchange-2013/
0
Naveen SharmaCommented:
How to find the ‘last logon time’ of mailboxes in the Exchange Server:
https://community.spiceworks.com/how_to/131242-how-to-find-the-last-logon-time-of-mailboxes-in-the-exchange-server

Track shared mailbox access on Exchange Server:
https://www.lepide.com/how-to/track-shared-exchange-mailboxes-access.html

Last Logon Information in Exchange 2013:
http://techgenix.com/last-logon-information-exchange-2013/
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.