Tracking logs for shared mailbox

Is it possible with 2010 exchange tracking logs to prove the following
We have a mailbox which has been made accesible in terms of permissions so a number of users havve access and control over the mailbox. We need to prove which of those users with access to that mailbox has sent/forwarded information from that mailbox elsewhere
(i.e. external mailbox recipient). Can the logs prove who did these actions? Or will they just show the mailbox itself sent/forwarded them on?                            

Hi,
One more thing, mailbox Audit Logging feature can track mailbox owner, delegate, and administrator logons to a mailbox, as well as what actions are taken while the user is logged on.
Document for reference
Mailbox Audit Logging for a Mailbox
https://technet.microsoft.com/en-us/library/ff461937(v=exchg.141).aspx
And when you use Search-MailboxAuditLog cmdlet to search mailbox audit log entries, remember to add -ShowDetails parameter to see who did actions in that
mailbox.
Best Regards.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Lynn-Li
TechNet Community Support

Similar Messages

  • How to use Search Folders in Outlook for shared mailboxes

    Hello
    We use Otlook 2010/2013 with MS Exchange 2010. In outlook there is "Serarch folder" with subfolders Large e-mail, Unreaded mails.... User can create own subfolders with rules.
    Users have attahet to outlook shared mailboxex for example Import, Export....
    For these mailboxes you cannot use "Search Folders" - outlook can use it only for your personal mailbox.
    To use "Serach folders" for shared mailbox I have to create new e-mail profile in Windows. User has to run outlook using these new profile "import". Now he is directly connected with shared mailbox.
    But users want to use "Search folders" when they are on own outlook profile with shared mailboxes attahecd to their profiles.
    Is it posible to do it? Or use some third-party
    product?
    Thank you for help
    Tomasz
    Kind Regards Tomasz

    Hi,
    I suggest we ask this question on Outlook forum:
    http://social.technet.microsoft.com/Forums/office/en-US/home?forum=outlook
    Regards,
    Simon Wu
    TechNet Community Support

  • Message Tracking logs for secondary smtp address

    Hi,
    There are many people sending mails to secondary smtp address instead of primary smtp address. How can i pull the report of message tracking logs if they sent it to secondary smtp address using get-messagetrackinglog cmdlet?
    Sankar M http://messagingdevelopment.blogspot.in/

    Hi Sankar,
    If I don't understand your description, it seems that you want to get the message tracking log on an mailbox with primary SMTP address and secondary SMTP address.
    If it is the case, please add both primary SMTP address and secondary SMTP address to the "Recipients" parameter. More details to see:
    http://technet.microsoft.com/en-us/library/aa997573(v=exchg.150).aspx
    Thanks
    Mavis Huang
    TechNet Community Support

  • Publish calendar for Shared Mailbox

    Hi,
    I have shared mailbox that I really need to have the calendar to be publish online (the ics link). I tried using the website and outlook 2013 client. Both of them saying that the "storeID provided isn't an ID of an item." Is there a way to be able
    to publish the calendar?

    Hi,
    We can enable Internet Calendar Publishing
    in exchange, then users can share calendar availability (free/busy) information with users in non-Exchange organizations and other individuals with Internet access.
    Refer to this document.
    https://technet.microsoft.com/en-us/library/ff607475%28v=exchg.141%29.aspx?f=255&MSPPError=-2147217396
    After creating a new sharing policy, use the following command to set the sharing policy Internet for shared mailbox.
    Set-Mailbox -Identity <shared mailbox> -SharingPolicy "new policy"
    Best Regards.
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Lynn-Li
    TechNet Community Support

  • User permissions for shared mailbox

    In a big organization, we've multiple shared mailboxes. Each mailbox is being looked at by different employees. We want to provide folder level restrictions to the employees and have primarily 3 type of access at a folder and root level:
    1) Owner access (Read, Create, Respond and Delete)
    2) Employee access (Read, Create and Respond)
    3) Read and View-only access
    Idea is to have a controlled access environment in the company where we don't want any employee to delete any e-mails and they're held accountable for their work.
    Million dollar question is - How do we achieve this in an Exchange Service 2010 Enterprise SP3 environment? Is it recommended to have such access levels? Can we've profile groups created to add users in future too with similar access restrictions?
    Please provide step by step.
    If this is not possible or advised, please suggest a better alternative with which we can track who deletes the e-mails and then change their behavior. May be some e-mail logs that help us determine this information? What is your suggestion?

    Hi,
    You can try Exfolders tool:
    http://gallery.technet.microsoft.com/office/Exchange-2010-SP1-ExFolders-e6bfd405
    How to use Exfolders:
    http://mouzzamh.wordpress.com/2012/04/01/how-to-use-exfolder-tool-for-exchange-2010/
    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
    or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
    Thanks,
    Simon Wu
    TechNet Community Support

  • Best practices for sharing mailboxes

    Hello,
    To share mailboxes, I am not sure of the 'best practices'. 
    From my point of view, there are two scenarios :
    classic mailbox : an user A wants to share his mailbox so it assigns rights on his mailbox for an userB via Outlook. The userB will add the userA's mailbox to his profile
    shared mailbox : the rights are managed by the administrator
    Is it correct to divide the management (i.e classic user manages his own mailbox and the administrator manages rights on shared mailbox) or is not ?
    And the delegation functionnality in Outlook is not really what I want because the userB must have only access to the mailbox (+calendar+contacts) but he hasn't to manage the appointments, etc.
    Thanks for your help

    Unless there is some other reason, users should own the right to share their mailboxes - it shouldn't be something that demands administrator management (if only so that the administrators aren't swamped by user requests for sharing their mailboxes). 
    For true shared mailboxes, when the mailbox is created, full access is granted by an administrator.

  • AD custom6 attribute and group memberships for shared mailboxes

    I have 900 shared mailboxes that are in Exchange 2007. These mailboxes have no owners and are provided access to the users threw AD groups. I need a script that will produce Each users custom6 attribute (SID is there) along with the shared mailboxes they
    have rights to (Full. send As etc...)
    This is a migration from 2007 to 2010 in different domains.
    [email protected]
    2142285476
    Charles B. Giles

    Deployment and upgrade questions should be asked in the forum for the product as there are tools available to automate 2007 to 2010 migrations.
    See:
    http://technet.microsoft.com/en-us/library/ee681665(v=exchg.141).aspx
    See:
    http://blogs.technet.com/b/exchange/archive/2012/05/23/exchange-server-deployment-assistant-update-for-exchange-2010-hybrid-deployments-with-office-365.aspx
    See:
    http://social.technet.microsoft.com/Forums/exchange/en-US/home?forum=exchange2010
    ¯\_(ツ)_/¯

  • Message recall outlook 2010 greyed out for shared mailboxes

    Hello,
    Can anyone advise if it's possible to recall a message sent from a shared mailbox? The user has full access permissions to the shared mailbox but the 'recall this message' option is greyed out.
    We have installed the hotfix below but it says the update is already installed on the system?
    http://support.microsoft.com/kb/2475877/en-gb
    This is using Windows 8, Outlook 2010 32bit and Exchange 2007 SP3.

    Hi,
    Recall message is an Outlook feature. Actually, we have a dedicated support team regarding the Microsoft Office Outlook. I recommend you ask your question on our Outlook forum which is staffed by more experts specializing in this kind of problems. Thanks
    for your understanding.
    For your convenience:
    http://social.technet.microsoft.com/Forums/office/en-US/home?forum=outlook
    Hope it helps.
    If you have any problem with Exchange server, welcome to our Exchange forum.
    Best regards,
    Amy Wang
    TechNet Community Support

  • OWA continuously prompts MailUser user when saving appointment for shared mailbox

    We have a number of users of type 'mailuser' who are granted full permissions to shared mailboxes. If a user of mailuser usertype does the following, they are unable to save appointments to the shared mailbox's calendar. Outlook Web App will
    continuously prompt the user to re-login. The functionality works in IE but *not* in FireFox (Update v28.0) and Chrome - I know probably beyond what can be fixed server-side but never hurts to ask. 
    Steps to reproduce:
    1. Mailuser user is granted full access to a shared mailbox.
    2. Mailuser accesses shared mailbox in OWA at https://mail.myorg.com/owa/[email protected]
    3. User goes to the Calendar within OWA and double-clicks a timeslot to add an appointment. After appointment details have been entered, click "Save and Close"
    4. Outlook Web App responds with a login prompt (same as initial prompt) and the user is unable to add the appointment - can't re-login via the prompt using the mailuser username and password.
    Thanks.
     

    Hi,
    I have tested in my Exchange 2007 environment with IE. I can user mail user's credential to access shared mailbox can add appointments perfectly.
    Please make sure the shared permission is set to Full Access instead of other mailbox permission. Also confirm the web browser for OWA access is a supported browser with OWA premium. If the issue persists, pleae remove the mailbox permission then re-add
    it back to have a try.
    Regards,
    Winnie Liang
    TechNet Community Support

  • Display name for shared mailbox

    Hi, by our customer I just installed new exchange 2013 server. I have created severalls shared mailboxes. And now, the customer want, that when somebody from the company send, or answer to an email, the recipient can see how has send the email. For example,
    the shared mailbox has display name "Service", user who has full access to this shared mailbox has display name "John", is there any way to merge these display names, so the recipient can see for expample "Service - John" as sender
    of the email?
    Thanks

    Hi,
    From your description, you want to set the displayname of the shared mailbox. I have a test in my lab, you can run the following cmdlet to achieve it.
    Set-User -Identity xxx -DisplayName "xxx"
    About the Identity parameter, you can use alias of the shared mailbox.
    Hope it helps.
    Best regards,
    Amy
    Amy Wang
    TechNet Community Support

  • How to make Rule to get notification for Shared Mailbox on Outlook 2013

    Hi All, is anyone have idea how to make rule on Outlook 2013 to get notify if you receive new email from your "Shared Mailbox".
    Is it possible that make a Rule for that notification? I have outlook here and I can't see notification when I receive new emails. Hope anyone can help me how to do this.

    Assuming the mailbox is open in outlook as a shared mailbox, you can use a macro to watch the folder: 
    Private WithEvents Items As Outlook.Items
    Private Sub Application_Startup()
      Dim Ns As Outlook.NameSpace
      Set Ns = Application.GetNamespace("MAPI")
      Set Items = GetFolderPath("Accounting\Inbox").Items
    End Sub
    Private Sub Items_ItemAdd(ByVal Item As Object)
      On Error Resume Next
    MsgBox "new message  from " & Item.SenderName & " in shared folder"
    End Sub
    Diane Poremsky [MVP - Outlook]
    Outlook & Exchange Solutions Center
    Outlook Tips
    Subscribe to Exchange Messaging Outlook weekly newsletter

  • Online Archive for Shared Mailbox Shows Main Mailbox SMTP Address, Not Shared Mailbox

    First off, we are running Exchange 2010 with Outlook 2010.  Exchange is running SP3UR5 and is stable.  Outlook has the latest updates.
    We have archive mailboxes on all our production mailboxes.  We automatically archive items older than two years into these.  We have several colleagues who have access to one or more shared mailboxes, who had no issues when they were using a Windows
    XP workstation.  However, when they were moved to our Windows 7 systems, their archive folders all show their primary mailbox SMTP address. If you click on a folder in the archive mailbox, the search bar shows the correct mailbox name. And to confuse
    things just a little bit more, the primary mailbox for these shared mailboxes shows the correct name.  Has anyone else seen this, and, more importantly, does anyone know of a solution? TIA ...

    Hello Willard,
    As Andy mentioned, this issue is a known issue which resolved in Exchange 2010 SP3 RU2. I know we are currently running Exchange 2010 SP3 RU5, however to resolve
    the issue, we need to install hotfix for Outlook clients as well. Please refer to the following hotfixes for Outlook 2010 and 2013:
    Note: Exchange 2010 SP3 Ru2 or later will update the “OwnerSmtpAddress”
    for all alternate mailbox. And before applying the following Outlook hotfix, we should have RU2 installed first.
    Outlook 2010 hotfix:
    Description of the Outlook 2010 hotfix package (Outlook-x-none.msp): August 13, 2013
    http://support.microsoft.com/KB/2817574  
    Issue description: You connect to Microsoft Exchange Server 2010 mailbox
    by using Microsoft Outlook 2010. When you enable the feature that lets you view the online archive of a manager in Outlook 2010, two online archives that have the same name are displayed. To resolve this issue, you must also have Exchange Server 2010 Service
    Pack 3 (SP3) Update Rollup 2 installed
    Outlook 2013 hotfix:
    Description of the Outlook 2013 hotfix package (Outlook-x-none.msp): August 13, 2013
    http://support.microsoft.com/kb/2817503  
    Issue description: When you enable the feature to see the online archive
    of the manager in Outlook 2010, two online archives that have the same name are displayed.
    After apply both update for Exchange server and Outlook client, the issue will be resolved accordingly. And I recommend to install the latest updates for Outlook
    clients:
    Title: How to install the latest applicable updates for Microsoft Outlook (US English only)
    Link:
    http://support.microsoft.com/kb/2625547
    Moreover, the issue will affect the “auto-mapping” archive mailboxes, since the issue only affect few users, please check the differences on the Outlook client side,
    and make sure the version and patches/updates are the same. If needed, we can first remove the auto-mapping full access permission, then re-add non-auto-mapping full access permission, at last, add
    additional mailbox from Outlook manually, thus it will not diplay same name for the archive mailbox we access.
    Remove the full access permission:
    Remove-MailboxPermission –Identity “Shared_mailbox” –User “affected_user_mailbox” –AccessRights FullAccess
       2.Re-add the full access permission with non-auto-mapping:
    Add-MailboxPermission -Identity “Shared_mailbox”
    -User “affected_user_mailbox”
    -AccessRight FullAccess -InheritanceType All -Automapping $false
       3. Then on the affected user mailbox outlook side,
    add additional mailbox manually.
    Please refer to above information and if anything unclear, feel free to let me know.
    Regards, Eric Zou

  • Set Reply-To for Shared Mailbox Using Existing Address?

    We have a shared mailbox named [email protected] Is there a way to set the reply-to email address for that shared mailbox to [email protected] if [email protected] is an existing mailbox?

    No, unfortunately you can not have same Reply-To or Primary SMTP address to two different mailboxes.
    Alternatively you can create a transport rule forward a mail to [email protected] if it is addressed to [email protected] or you could set forwarder on mailbox level too...
    Blog |
    Get Your Exchange Powershell Tip of the Day from here

  • How to track log for FR reports changes done in Workspace

    Hello,
    How can i track if a particular FR report or a folder is being updated or deleted from workspace or FR STUDIO ?
    Is there any log file which can give me the details of the username who accessed which report or who made any changes to any particular report ?
    I have checked the log files under Hyperion_home/logs/BI Plus and logs under BI Plus/logs filder but could not find anything fruitfull .
    Please suggest.
    Thanks
    Jiten

    Hello Experts,
    Please help me out in this.
    Thanks
    Jiten

  • More Info Needed in Message Tracking Logs in Exchnage 2010 MAILBOX

    Hello All
    I would like to understand more on message tracking which was little bit confused for me 2 days back.
    As far as i can know, HUB SERVER is  the main part of the messaging tracking is playing  vital role in Exchange 2010.
    also, mailbox roles too...
    i can see the message tracking logs created in mailbox is only usefull , for  web interface for message tracking is part of the Exchange Control Panel and provides very basic search
    functionality to search for messages either sent by or received by a mailbox, based on the sender, recipients, and subject line.  
    so message tracking logs which is available in mailbox is only user for end users who can perform the message tracking by themself vua ECP without installing EMC. -- AM I RIGHT  
    How will message tracking logs created in mailbox servers .......... will it replicate from HUB servers?  
    so if i have 4 mailbox servers, will all the mailbox servers having the same message tracking logs? or we may get different
    Your information is much valuable to better understand on MT

    Hi Rush,
    Please checkout this technet blog available at below link which clarify your concern in depth:
    http://blogs.technet.com/b/messaging_with_communications/archive/2011/04/22/how-to-track-message-in-exchange-2003-2007-2010.aspx
    http://exchangeserverpro.com/exchange-2010-message-tracking/
    However, a helpful resource you can checkout at here(http://www.exchangereports.net/) which comes with similar features while need to track mailboxes(sent/received emails), server traffic reports or folder reports in exchange server. It facilitates to produce
    the reports in various format which suits better in our environment.

Maybe you are looking for