Hi,
Is there a way to tell that one administrator gave himself access to a mailbox and then removed that access outside of the usual event viewer logs? Unfortunately, the log shows both "access to a mailbox" and just a regular "meeting schedule with free/busy lookup" as logged on to accesses...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.