RE: Track who logs into my email

["Lee Bottone" <fusedlee () eanalysis net>]

With the default software out of the box, assuming you are an administrator
and do not mind looking through the log files, you can set up auditing to
collect each login to the Exchange box. The issue is on a busy box this log
could get really large really quick. You can set up auditing to catch the IP
address of the PC logging into the box, beyond that it would take research
to track down who was logged in to that PC at that time. 

I wrote a tutorial to do this in Exchange 2003, I could probably do so for
Exchange 2007 this weekend if it would be beneficial.

Lee

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Worrell, Brian
Sent: Friday, January 25, 2008 9:35 AM
To: mike () security-bounce com; security-basics () securityfocus com
Subject: RE: Track who logs into my email



Mike,

Are you an administrator of the Exchange server? or an end user?  As an
end user, not sure that you would be able to get that information for
your whole mailbox.  Even as an admin, with the default tools out of the
box, I think it only showed the last logged in user to the mailbox.
That could pose an issue if your backup software ran as a user service
account, it would show them more than likely.

Hope that helps some.

Brian
-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Michael R. Martinez
Sent: Friday, January 25, 2008 10:27 AM
To: security-basics () securityfocus com
Subject: Track who logs into my email

Hello list,

I wanted to know if there is anyway to track who is logging into my
email on the server side. Exchange 2007on server 2K3 w/outlook client
2003. Anything will help.

Thanks,

Mike
Michael R. Martinez
TF: 800-987-7307