exchange, mailbox

how can I found who last logged into the mailbox (shared mailbox)

like 5000 mails were unread suddenly
pramod1Asked:
Who is Participating?
 
Wayne88Commented:
What version of Exchange?

"In Exchange Server 2003 the last logon time for a mailbox was visible in the Exchange System Manager.  For Exchange Server 2007 and 2010 the last logon time was removed from the Exchange Management Console, and so we need to use a differnet method to find this information."

https://practical365.com/exchange-server/last-logon-time-exchange-2010-mailbox-users/
0
 
pramod1Author Commented:
exchange 2010 enterprise
0
 
Wayne88Commented:
Use theGet-MailboxStatistics cmdlet in the Exchange Management Shell
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
pramod1Author Commented:
if mailbox name is im connect, what command should I use
0
 
Wayne88Commented:
How many users do you have?  If not many, just use theGet-MailboxStatistics it will show all then look for the shared mailbox name.
0
 
pramod1Author Commented:
NO I NEED TO see who logged into the mail box, what command should I use
0
 
Wayne88Commented:
Get-MailboxStatistics "Shared Mailbox Name"

Do you know the name of the shared mailbox?
0
 
pramod1Author Commented:
Get-MailboxStatistics -IMCONNECTSETUP@DOMAIN.COM | Sort LastLogonTime -Descending- IS NOT WORKING
0
 
pramod1Author Commented:
Yes I pinged above
0
 
Wayne88Commented:
Actually, not sure if Get-MailboxStatistics will work with sharedmailbox because users can’t log into it them directly.  Sorry, let me do some more testing.
0
 
FOXActive Directory/Exchange EngineerCommented:
Try

Get-MailboxStatistics 'emailaddressofsharedmailbox' | Select *log*
0
 
Wayne88Commented:
Did you have mailbox auditing enabled?  Use Get-Mailbox SharedMailBox | fl *audit*

If false then you won't have that history.  You will have to enabled it first.

https://community.spiceworks.com/how_to/120006-how-to-monitor-who-accessed-a-shared-mailbox
0
 
pramod1Author Commented:
IT JUST SAYS LOG OFF TIME
0
 
Wayne88Commented:
Use Get-Mailbox SharedMailBox | fl *audit* to check if mailbox auditing is enabled.  It's disabled by default.

Replace SharedMailBox with actual name
0
 
pramod1Author Commented:
I NEED TO CHECK who logged bwteen 9 and 11am today
0
 
FOXActive Directory/Exchange EngineerCommented:
What version of exchange are you using? Please list that when opening questions
0
 
pramod1Author Commented:
can I just found who logged
0
 
pramod1Author Commented:
sorry exchange 2010 sp3
0
 
pramod1Author Commented:
I just need to know who emails were unread and who logged in today
0
 
Wayne88Commented:
Won't be possible to trace who accessed the shared mailbox earlier today without mailbox auditing enabled.  By default, the mail box audit is disabled.

https://www.netwrix.com/how_to_monitor_who_accessed_shared_mailbox.html

Get-MailboxStatistics cmdlet will only show the last logon time
0
 
pramod1Author Commented:
SO there is no command shell to find who logged
0
 
FOXActive Directory/Exchange EngineerCommented:
Try

Get-LogonStatistics 'emailaddressofthesharedMailbox'
0
 
pramod1Author Commented:
I ONLY GOT SERVER NAME
0
 
Kurt JohnsonTechnical ManagerCommented:
Hi,
Until you have auditing pre-enabled, you can't see who has done what in your environment.
You must enable auditing in order to fetch these reports and find the real culprit.
Below guide containing step by step details to enable shared mailbox auditing and track every critical changes at granular level - https://www.codetwo.com/admins-blog/user-mailbox-and-shared-mailbox-auditing-in-exchange-2013/
0
 
Naveen SharmaCommented:
How to find the ‘last logon time’ of mailboxes in the Exchange Server:
https://community.spiceworks.com/how_to/131242-how-to-find-the-last-logon-time-of-mailboxes-in-the-exchange-server

Track shared mailbox access on Exchange Server:
https://www.lepide.com/how-to/track-shared-exchange-mailboxes-access.html

Last Logon Information in Exchange 2013:
http://techgenix.com/last-logon-information-exchange-2013/
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.