Exchange Server Forums

Logging on by another user - Event ID 1013

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> Logging on by another user - Event ID 1013

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Logging on by another user - Event ID 1013 - 8.May2008 10:54:30 PM

bigmeancow

Posts: 1
Joined: 8.May2008
Status: offline

Hi,

For a user logging into a different user's mailbox, I was wondering if there is any way to see what resource the user is accessing(inbox, calendar, etc). I'm specifically talking about events in the Application Event Log like Event ID 1013 (user1 was validated as ...user1 and logged onto ...user2)

I know with unsuccessful attempts(like Event ID 1029), I can use the PFDAVAdmin and find out what specifically was being accessed, but I'm wondering if I can do the same thing for the successful attempts? We're trying to find out if a exchange admin is accessing users' inboxes when he shouldn't be.

Any help is GREATLY appreciated.

Post #: 1

Featured Links*

RE: Logging on by another user - Event ID 1013 - 13.May2008 7:53:21 PM

Sembee

Posts: 3494
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

Exchange doesn't log down to that level - it only logs the access.

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to bigmeancow)

Post #: 2