Problem solve Get help with specific problems with your technologies, process and projects.

Trace who has checked the president's email

Learn how you can monitor mailbox access by auditing or by viewing Mailbox Resources in Exchange Server.

How can we trace which users have checked the company president's email box? I know Exchange and Active Directory keep track of logons. We are running static IP addresses, so I thought maybe we could get the IP also, in case the person is logging into the domain as the president. We are running Windows 2003 SP1, Exchange 2003 SP1, and clients are Windows XP SP2.
If someone does access a mailbox and they are not the primary NT account, then a 1016 event will be created in the application log. See this Microsoft article for more information: How to monitor mailbox access by auditing or by viewing Mailbox Resources in Exchange Server.

You might also want to check out this tip: Establishing mailbox audit trails on Exchange Server.

Do you have comments on this Ask the Expert Q&A? Let us know.

Related information from SearchExchange.com:

  • Expert Advice: Who has full mailbox access?
  • 15 tips in 15 minutes: Managing recipients and distribution lists
  • Reference Center: Permissions and authentication
  • This was last published in January 2006

    Dig Deeper on Exchange Server setup and troubleshooting

    Have a question for an expert?

    Please add a title for your question

    Get answers from a TechTarget expert on whatever's puzzling you.

    You will be able to add details on the next page.

    Start the conversation

    Send me notifications when other members comment.

    Please create a username to comment.