RE: Track who logs into my email



I haven't tried this myself or ever really spent too much time on email
access monitoring.
But what you mention, will this distinguish between inbox accessed and
someone viewing your calendar?

Nick Vaernhoej
"Quidquid latine dictum sit, altum sonatur."


-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of Paul J. Brickett
Sent: Friday, January 25, 2008 10:13 AM
To: Worrell, Brian
Cc: mike@xxxxxxxxxxxxxxxxxxx; security-basics@xxxxxxxxxxxxxxxxx;
security-basics-return-47498@xxxxxxxxxxxxxxxxx
Subject: RE: Track who logs into my email

This is relatively easy to set up. In Exchange 2007, an event is written

to the Application log anytime someone accesses a mailbox for which they

are not the owner. In earlier versions of Exchange, this is not default
behavior, but you can still set this up by configuring diagnostic
logging
on the Information Store service.

The event written will be event 1016. It will include the mailbox being
accessed along with the username of the user who accessed it.

You can then use any event log monitoring tool to look for and alert on
event 1016 written for your mail box. In the absence of a monitoring
suite, you can script someone to send you an alert.

-PJB



On Fri, 25 Jan 2008, Worrell, Brian wrote:



Mike,

Are you an administrator of the Exchange server? or an end user? As
an
end user, not sure that you would be able to get that information for
your whole mailbox. Even as an admin, with the default tools out of
the
box, I think it only showed the last logged in user to the mailbox.
That could pose an issue if your backup software ran as a user service
account, it would show them more than likely.

Hope that helps some.

Brian
-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx
[mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of Michael R. Martinez
Sent: Friday, January 25, 2008 10:27 AM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Track who logs into my email

Hello list,

I wanted to know if there is anyway to track who is logging into my
email on the server side. Exchange 2007on server 2K3 w/outlook client
2003. Anything will help.

Thanks,

Mike
Michael R. Martinez
TF: 800-987-7307




This electronic transmission is intended for the addressee (s) named above. It contains information that is privileged, confidential, or otherwise protected from use and disclosure. If you are not the intended recipient you are hereby notified that any review, disclosure, copy, or dissemination of this transmission or the taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please notify the sender that this message was received in error and then delete this message.
Thank you.



Relevant Pages

  • Re: Outlook client fails to connect to Exchange Server 2000 but OW
    ... there were errors in the logs even before this. ... Now I tried to get help from 1 guy workin with MS Exchange, ... We have a single MS Exchange Server 2000 which works as a member ... I can access exchange thru OWA but not thru Outlook client. ...
    (microsoft.public.exchange.clients)
  • RE: CEICW-OMA errors
    ... After the exchange server has been reinstalled, ... then reproduce the issue by running CEICW again to capture logs. ... calling CEmailCommit::ValidatePropertyBag. ...
    (microsoft.public.windows.server.sbs)
  • Re: Outlook client fails to connect to Exchange Server 2000 but OW
    ... there were errors in the logs even before this. ... Now I tried to get help from 1 guy workin with MS Exchange, ... We have a single MS Exchange Server 2000 which works as a member ... I can access exchange thru OWA but not thru Outlook ...
    (microsoft.public.exchange.clients)
  • Direct Push only working sporadicly.
    ... Stand-alone Exchange 2003 server w/SP2. ... sometimes a handset will receive e-mail almost instantly ... huge number of 401 response codes in the IIS logs and in the handset ...
    (microsoft.public.pocketpc.activesync)
  • Re: 4.4.7 email delays
    ... If message passes Exchange then it should show up in logs. ... If you set your e-mail client to use ISP's server for outbound mail, then outgoing message will not be recorded in logs. ...
    (microsoft.public.exchange.admin)