http://support.microsoft.com/kb/867640 This above link may help you?
Regards Amardeep T On Mon, Feb 21, 2011 at 11:14 PM, HAREN BHATT <[email protected]> wrote: > Hi All, > Need advice: > I suspect that somebody is reading mails from the Microsoft Exchange > server. It could be the Admin himself. I such a case I have been asked to > monitor the security event logs .Can you please tell me what security event > ID’s/logs should be closely monitored form the Exchange server? > > -- > Thanks & Regards: > Haren Bhatt | Security Analyst > |MCSA |SCSA |ENSA |CEHv5 |ECSA-LPT . > > Blog : http://security-culture.blogspot.com/ > > "We Have A Culture Of Security." > NOTICE:This communication is meant only for the addressee(s) named above > and may contain information which is and/or legally privileged. If you are > not the named addressee(s), or the agent responsible for receiving and > delivering this communication to the named addressee(s), this communication > has been sent to you in error, please notify the sender and delete all > copies. If so, kindly contact us immediately for retrieval purposes. > Unauthorized dissemination, distribution, copying or reliance on this > communication is prohibited and may attract criminal penalties. > For privacy reasons all the addressee(s) may be hidden. > > -- > You received this message because you are subscribed to the Google Groups > "nforceit" group. > To post to this group, send an email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/nforceit?hl=en-GB. > -- You received this message because you are subscribed to the Google Groups "nforceit" group. To post to this group, send an email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/nforceit?hl=en-GB.
