RE: Track who logs into my email

["Worrell, Brian" <BWorrell () isdh IN gov>]

Lee,

Does the log show what they accessed in the mailbox?  If not, then
someone could deny what they did, and say "Well I was looking at his
calendar to see if he was free this afternoon".  Had someone do that who
worked for me, back in the exchange 2000 days.  Of course 2000 was much
easier to get into.

Only asking, as curious what 2007 can log, detail wise.

Thanks
Brian 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Lee Bottone
Sent: Friday, January 25, 2008 11:19 AM
To: mike () security-bounce com; security-basics () securityfocus com
Subject: RE: Track who logs into my email

With the default software out of the box, assuming you are an
administrator and do not mind looking through the log files, you can set
up auditing to collect each login to the Exchange box. The issue is on a
busy box this log could get really large really quick. You can set up
auditing to catch the IP address of the PC logging into the box, beyond
that it would take research to track down who was logged in to that PC
at that time. 

I wrote a tutorial to do this in Exchange 2003, I could probably do so
for Exchange 2007 this weekend if it would be beneficial.

Lee

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Worrell, Brian
Sent: Friday, January 25, 2008 9:35 AM
To: mike () security-bounce com; security-basics () securityfocus com
Subject: RE: Track who logs into my email



Mike,

Are you an administrator of the Exchange server? or an end user?  As an
end user, not sure that you would be able to get that information for
your whole mailbox.  Even as an admin, with the default tools out of the
box, I think it only showed the last logged in user to the mailbox.
That could pose an issue if your backup software ran as a user service
account, it would show them more than likely.

Hope that helps some.

Brian
-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Michael R. Martinez
Sent: Friday, January 25, 2008 10:27 AM
To: security-basics () securityfocus com
Subject: Track who logs into my email

Hello list,

I wanted to know if there is anyway to track who is logging into my
email on the server side. Exchange 2007on server 2K3 w/outlook client
2003. Anything will help.

Thanks,

Mike
Michael R. Martinez
TF: 800-987-7307