Announcement

Collapse
No announcement yet.

Diagnostic logging

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Diagnostic logging

    Is Exchange 2010 SP1 capable of auditing permission changes to mailbox objects via the EMC? For example if changes are made for "full access" or "send as" is an event ID appended in the application logs.
    Auditing via the ECP doesn't seem to expose this functionality?

  • #2
    Re: Diagnostic logging

    This can be done with the Administrator Audit Logging, check:

    http://technet.microsoft.com/en-us/l.../dd335052.aspx.

    Comment


    • #3
      Re: Diagnostic logging

      Originally posted by FischFra View Post
      This can be done with the Administrator Audit Logging, check:

      http://technet.microsoft.com/en-us/l.../dd335052.aspx.
      Thanks for your input. This is already enabled in SP1. But it's not specifically what i was looking for. I can export the logs from the ECP but i was looking for something a bit cleaner than a big XML dump.

      Comment


      • #4
        Re: Diagnostic logging

        Update:

        Found a slightly more cleaner way with more satisfactory results.

        Search-AdminAuditLog -Cmdlets Remove-MailboxPermission
        Search-AdminAuditLog -Cmdlets Add-MailboxPermission

        This obviously only applys to the "Full Access Permission". But the command can be run against any cmdlet.

        Comment

        Working...
        X