Exchange Server Forums

"nt authority\system"

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> "nt authority\system"

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

"nt authority\system" - 15.Mar.2006 9:06:25 PM

CWilson

Posts: 31
Joined: 26.Apr.2004
From: IL.
Status: offline

Can some one who knows explain why when I look at ESM-->server-->firststoragegroup-->firstmailboxstore-->mailboxes: For most mailboxes it shows either that users account or the backup account as the last logged into that mailbox, but inevetably a handful of users mailboxes are logged in as "nt authority\system" no matter whether they are actually in their mailbox or not?? I am wondering if I should be concered of a security breach or something? Even if no concern, curiosity has this Cat and I'd like to know, appreciate the feedback in advance.
-CW

Post #: 1

Featured Links*

RE: "nt authority\system" - 15.Mar.2006 10:30:54 PM

rsx

Posts: 22
Joined: 20.Apr.2005
From: canada
Status: offline

it's normal.

You could have a backup system running under that account.

(in reply to CWilson)

Post #: 2

RE: "nt authority\system" - 16.Mar.2006 5:54:02 AM

Exchange_Admin

Posts: 376
Joined: 23.Feb.2003
From: Texas
Status: offline

As rsx said, this is normal.
What you are seeing is the last account to access the mailbox.
Maybe it was AV software, mailbox management recipient policy, etc.

(in reply to rsx)

Post #: 3

RE: "nt authority\system" - 16.Mar.2006 5:21:07 PM

CWilson

Posts: 31
Joined: 26.Apr.2004
From: IL.
Status: offline

Thanks all that makes good sense, i was not aware that the AV logged as that, but it makes good sense when you stop for 3 seconds to think about it. No other account for Symantec is defined and it's constantly scanning... Appreciate the peace of mind and the peice of your minds with the help.

(in reply to Exchange_Admin)

Post #: 4