• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

security issue - Tracing OWA sessions

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2000] >> Server Security >> security issue - Tracing OWA sessions Page: [1]
Login
Message << Older Topic   Newer Topic >>
security issue - Tracing OWA sessions - 31.May2005 5:21:00 AM   
charlieafif

 

Posts: 26
Joined: 22.Mar.2005
From: london
Status: offline
One of my user's has reported that unauthorised access has been made to her company email account. The intruder is a disgruntled ex-employee and knows the password.

I'd like to know if there are any records of IP addresses + times etc that might be listed in some logs on the exchange 2000 server. I have left the user's password unchanged as i don't want to scare off the intruder for now. They are still accessing the mail on a daily basis.

Is there any software i could install to help me investigate the next time the intruder logs on to OWA?

thanks in advance
Charlie
Post #: 1
RE: security issue - Tracing OWA sessions - 31.May2005 10:25:00 AM   
pjhutch

 

Posts: 3578
Joined: 21.Jul.2001
From: W Yorks, England
Status: offline
Check the IIS logs in C:\Windows\System32\Logfiles which stores this info for OWA.

(in reply to charlieafif)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2000] >> Server Security >> security issue - Tracing OWA sessions Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter