Tracing Un-Authorized Access to an Inbox

[eagle19]

We may have some employees who arelooking into other persons Outlook Inbox's. Rather than restricting all users we just want to identify which user is looking!


Does Exchange 5.5 have any functionality to allow us to trace this user or is there any software on the market that could help?

This is really urgent so any help you guys can give would be great!!

 

[N0ktar]

Changing the password should take care of the problem. You've got some authentication issues.

 

[erlareynis8]

You´ll find these persons in the W2000 Event Logs.

There you see success events or whatever its called in english. But there you can see something like:

---
Success
User X successfully logged in into User Y mailbox.
This is not User X primary mailbox.
---

There you´ll see who logged into whoms box.

Hope this helps.
Cheers,
Icy

 

[N0ktar]

Not necessarily, that event log info is actually quite misleading if you rely on it for security information. You get the same log message when you share any personal mailbox folder with others on the network and with several other events.