Announcement

Collapse
No announcement yet.

Exchange 2003 - Last Mailbox Access

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Exchange 2003 - Last Mailbox Access

    Background: I want to remove old and unused accounts but we have some off-campus users who do not do AD Windows logons and "simply" access their email.

    How can I access the time/date of a given users's last time they have read their email?

    I know how to get the last logon time/date from Active Directory but this only shows me the Windows logon time/date and NOT the Exchange Mailbox access.

    TIA

  • #2
    Re: Exchange 2003 - Last Mailbox Access

    If I understand you correctly, this is what you may be after.
    Click image for larger version

Name:	E2k3lastlogoff.JPG
Views:	1
Size:	101.9 KB
ID:	462676
    1 1 was a racehorse.
    2 2 was 1 2.
    1 1 1 1 race 1 day,
    2 2 1 1 2

    Comment


    • #3
      Re: Exchange 2003 - Last Mailbox Access

      Unfortunately that may not work because NT AUTHORITY\SYSTEM accesses the mailbox periodically... Sorry I don't have a solution but we got a couple of Exchange MVPs that might
      Attached Files
      Regards,
      Jeremy

      Network Consultant/Engineer
      Baltimore - Washington area and beyond
      www.gma-cpa.com

      Comment


      • #4
        Re: Exchange 2003 - Last Mailbox Access

        In the Exchange Server Cookbook (O Reilly) there is a script to do this.
        You can see the script here: http://www.exchangecookbook.com/arch...r_5_scrip.html

        But you need the book to make any sense of it.

        You should get the book - it is very good and was written by some other Exchange MVPs.

        Simon.
        --
        Simon Butler
        Exchange MVP

        Blog: http://blog.sembee.co.uk/
        More Exchange Content: http://exchange.sembee.info/
        Exchange Resources List: http://exbpa.com/
        In the UK? Hire me: http://www.sembee.co.uk/

        Sembee is a registered trademark, used here with permission.

        Comment


        • #5
          Re: Exchange 2003 - Last Mailbox Access

          OK. I've tested the script and it gives a similar result to above Exchange Manager. Basically, whoever logged on last. In many cases, it's the Service account or McAfee rather than the user.

          So, my idea (mailbox access date) is a no-go so far as testing un-used accounts. Network logon is also not good since mailbox access does not count as a "logon" so far as I can see. I guess what I really need is the last time a given user (e.g. james.doe) was authenticated by the domain for any purpose whatsoever.

          Ah, well. Thanks for the suggestions!

          Comment


          • #6
            Re: Exchange 2003 - Last Mailbox Access

            Check out oldcmp from joeware.net:

            http://www.joeware.net/win/free/tools/oldcmp.htm

            It's used to find when a computer account last updated it's password but also says it can be used with a user account with the correct switches.

            Might be worth a look at

            Michael
            Michael Armstrong
            www.m80arm.co.uk
            MCITP: EA, MCTS, MCSE 2003, MCSA 2003: Messaging, CCA, VCP 3.5, 4, 5, VCAP5-DCD, VCAP5-DCA, ITIL, MCP, PGP Certified Technician

            ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

            Comment


            • #7
              Re: Exchange 2003 - Last Mailbox Access

              Originally posted by [email protected]
              I want to remove old and unused accounts but we have some off-campus users who do not do AD Windows logons and "simply" access their email.
              Hmm, don't they still have to authenticate against the AD database? So surely this would leave a an entry in the Security event log (provided you have the proper auditing configured).
              Regards,
              Jeremy

              Network Consultant/Engineer
              Baltimore - Washington area and beyond
              www.gma-cpa.com

              Comment

              Working...
              X