An event is logged when a user accesses a mailbox for which their NT account is not the primary account for a particular mailbox as you are aware, but it's fairly trivial to make sure that event never fires if one has permissions admin rights in Exchange. What is the real underlying goal behind the EVP of Security's request below?
> -----Original Message----- > From: Clemens, Rick [mailto:[EMAIL PROTECTED]] > Sent: Monday, April 08, 2002 11:06 PM > To: Exchange Discussions > Subject: RE: Unauthorized Access to mail boxes > > > There are a group of people who have Permissions Admin rights > to the entire exchange environment. These people have rights > to everyones mailbox but are NOT Authorized to access them > without the users permissions. Thus the question on > Unauthorized access to mailboxes. I really don't want to get > into a philosophy war about trusting your admins etc.....I > agree with you totally. The reality I am dealing with is in > the statement below from the EVP of Security and I have to > deal with it. So if anyone knows of a tool or a way to > accomplish his needs I would greatly appreciate it. > > Thanks. > > -----Original Message----- > From: Chris Scharff [mailto:[EMAIL PROTECTED]] > Sent: Monday, April 08, 2002 1:06 PM > To: Exchange Discussions > Subject: RE: Unauthorized Access to mail boxes > > > There is no unauthorized access to mailboxes in Exchange. One > can access mailboxes one has permissions to and cannot access > mailboxes which one does not have permissions to. > > -- > Chris Scharff MVP, MCSE > MessageOne > 512-652-4500 x244 > > "When the country falls into chaos, patriotism is born." > --Tao Te Ching > > > -----Original Message----- > > From: Clemens, Rick [mailto:[EMAIL PROTECTED]] > > Sent: Monday, April 08, 2002 8:46 AM > > To: Exchange Discussions > > Subject: Unauthorized Access to mail boxes > > > > > > <Insert Message from EVP Chief Security Officer> > > > > Is there any strategy or tools that can alert us, as to > > unauthorized access to mail boxes? > > > > <Insert End> > > > > I currently have diagnostic logging enabled on security and > > it fills the logs with 1016's everytime anyone does anything > > to someone elses mailbox including accessing > > freebusy....Obviously this is not what he is looking for. Is > > there any 3rd party tool out there that can hook into Outlook > > and monitor the mailbox for access and report on it accurately? > > > > Thanks. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
