Even this may not be practical, because my AV uses the Administrator's account to check for viruses.
Regards, Michael -----Original Message----- From: Chakravarty, Sakti [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 27, 2004 12:14 AM To: Exchange Discussions Subject: RE: Prevent administrator access to mailboxes Look in the Exchange server's Event Log for event 1016. It logs each occasion when a mailbox is accessed by an NT account that is not the primary associated account for the mailbox. If you're using 5.5, someone could log in as the Service Account and connect to mailboxes, so have a think about who knows the service account password. You can only delete the entire Log, not just a particular event. Whilst you can filter the Event Log to only show certain events, tying to hide particular events would be a waste of time. Also have a read of this: http://support.microsoft.com/default.aspx?scid=http://support.microsoft. com:80/support/kb/articles/Q262/0/54.asp&NoWebContent=1 Sakti -----Original Message----- From: Pablo [mailto:[EMAIL PROTECTED] Sent: Tuesday, 27 April 2004 5:39 AM To: Exchange Discussions Subject: Prevent administrator access to mailboxes Is it possible to prevent the exchange administrator from accessing mailboxes content? If no, is it possible to prevent the administrator from hiding or erasing the logs that prove this type of access. How can I tell If the administrator is accessing other users' mailboxes? _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. ********************************************************************** This message is intended for the addressee named and may contain privileged information or confidential information or both. If you are not the intended recipient please delete it and notify the sender. ********************************************************************** _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
