EXPERT RESPONSE
VIEW MEMBER FEEDBACK TO THIS ASK THE EXPERT Q&A.
There is a log for the HTTP virtual server, but not in the Exchange System Manager. It is configured in the Internet Information Services Manager (ISM) and it is enabled by default. The log itself can be found in the C:\Windows\System32\LogFiles\W3SVC1\exyymmdd.log file. Open up the log file for the day in question, and you should be able to see the date, timestamp and username of the person that connected to the mailbox in question.
If you cannot find the log file in the location I have specified here, it may have been moved from the default location. To check the current location:
- Open the ISM.
- Navigate to Servername (local computer)\Web Site\Default Web Site.
- Right click on Default Web site and click Properties.
- Verify that the Web site tab is selected and click on the Properties button in the Enable logging section (Note if there was no checkbox next to Enable Logging then this feature was disabled).
The path should be listed in the Log file directly field.
MEMBER FEEDBACK TO THIS ASK THE EXPERT Q&A:
I believe you can check whether or not a user has accessed a mailbox via OWA using Exchange System Manager.
Drill down to the mailbox store and check logons. In the right hand pane look at the Client Version tab. OWA connections are recorded as HTTP.
—Ivan N.
Do you have comments on this Ask the Expert Q&A? Let us know.
Related information from SearchExchange.com:
Reference Center: Monitoring and performance
Reference Center: Outlook Web Access
|
