Q

What event log tracks user access to Exchange Server?

Find out what event log provides the date and time a user last logged on to the Exchange server.

Is there a log that provides the time and date a user logged on to the Exchange server?

The Local Security event log will tell you who and when a given user logged on to the Exchange server. The Domain Controller Security event log will tell you who logged on to a specific mailbox and when they did so. You can use the Exchange System Manager (ESM) to view the last account that accessed a specific mailbox and at what time.

The system account logs on to mailboxes periodically, so don't panic if you see that the local system account accessed your mailbox. It was most likely your antivirus software scanning your mailbox.

Do you have comments on this Ask the Expert Q&A? Let us know.

Related information from SearchExchange.com:

This was first published in September 2007

Dig deeper on Microsoft Exchange Server Monitoring and Logging

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

1 comment

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchWindowsServer

SearchEnterpriseDesktop

SearchCloudComputing

SearchSQLServer

Close