RE: Track who logs into my email

With the default software out of the box, assuming you are an administrator
and do not mind looking through the log files, you can set up auditing to
collect each login to the Exchange box. The issue is on a busy box this log
could get really large really quick. You can set up auditing to catch the IP
address of the PC logging into the box, beyond that it would take research
to track down who was logged in to that PC at that time.

I wrote a tutorial to do this in Exchange 2003, I could probably do so for
Exchange 2007 this weekend if it would be beneficial.

Lee

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx] On
Behalf Of Worrell, Brian
Sent: Friday, January 25, 2008 9:35 AM
To: mike@xxxxxxxxxxxxxxxxxxx; security-basics@xxxxxxxxxxxxxxxxx
Subject: RE: Track who logs into my email



Mike,

Are you an administrator of the Exchange server? or an end user? As an
end user, not sure that you would be able to get that information for
your whole mailbox. Even as an admin, with the default tools out of the
box, I think it only showed the last logged in user to the mailbox.
That could pose an issue if your backup software ran as a user service
account, it would show them more than likely.

Hope that helps some.

Brian
-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of Michael R. Martinez
Sent: Friday, January 25, 2008 10:27 AM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Track who logs into my email

Hello list,

I wanted to know if there is anyway to track who is logging into my
email on the server side. Exchange 2007on server 2K3 w/outlook client
2003. Anything will help.

Thanks,

Mike
Michael R. Martinez
TF: 800-987-7307

Relevant Pages

  • Re: password expiration policy for admin and system accounts ?
    ... > scheduled tasks that use various administrative accounts. ... > administrative account which starts several key exchange services. ... > Thus every time the exchange server was rebooted several exchange services ... >> JJ wrote:>>> Our auditors are objecting to our having Domain Administrator and domain>>> system accounts with passwords that never expire. ...
    (microsoft.public.security)
  • Re: password expiration policy for admin and system accounts ?
    ... > scheduled tasks that use various administrative accounts. ... > administrative account which starts several key exchange services. ... > Thus every time the exchange server was rebooted several exchange services ... >> JJ wrote:>>> Our auditors are objecting to our having Domain Administrator and domain>>> system accounts with passwords that never expire. ...
    (microsoft.public.win2000.security)
  • RE: reset administrator password - strange problems
    ... privileges and reinstalling exchange with /domainprep. ... > I understand that you have manually changed the Directory Services Password ... > Restore Mode Password on the SBS 2K3 server. ... If the Administrator ...
    (microsoft.public.windows.server.sbs)
  • Re: OWA
    ... by editing the properties of these users from exchange server ADUC console, ... prompt for all accounts except administrator. ... And I have tried the domain\user login and it does not work. ...
    (microsoft.public.exchange.setup)
  • RE: Exchange Information Store Security? Send As...
    ... I'm no Exchange expert, but it would seem to me that giving trusted ... the server on the security of your user's application. ... This monitoring should be assigned to a system or network ... administrator as an ongoing task, ...
    (Focus-Microsoft)