Determine whether an admin is viewing other users mailboxes?

Hi all, I am posting this up to the security and exchange groups. Is there a
way to determine whether an indivudual who has permissions to open other
users mailboxes is actually doing so? For example can you view the outlook
profile of the individual in question? or an event log entry? We have a
possible abuse of privilege situation but are unsure as to whether this type
of behavior can be verified. Any advice is appreciated. Thanks.

Srikrishna
Thu Jun 16 05:05:59 CDT 2005

I guess you can do that.....when the file audit is enabled on the harddisk
(NTFS) there will be a audit log..
and for viewing a diff user mailbox the user needs to pass the userid n
password details to the server..may be by using this you can catch it...
-------------------------
srikrishna komatineni



"Thorin Miley" <ThorinMiley@discussions.microsoft.com> wrote in message
news:7A02752B-A583-44E5-A1D2-452AE501EF45@microsoft.com...
> Hi all, I am posting this up to the security and exchange groups. Is
> there a
> way to determine whether an indivudual who has permissions to open other
> users mailboxes is actually doing so? For example can you view the
> outlook
> profile of the individual in question? or an event log entry? We have a
> possible abuse of privilege situation but are unsure as to whether this
> type
> of behavior can be verified. Any advice is appreciated. Thanks.