We have a bunch of mailboxes I suspect are no longer used. However when I view the last logontime it shows today. How can I verify the source of the logon? Maybe it's a service? or impersonation?
If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.
Exchange 2013 - Audit Mailbox Access
https://community.spiceworks.com/topic/1996045-exchange-2013-audit-mailbox-access