Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I read through the Technet article on Mailbox auditing but it seems to only be working for MAPI access.

I perform the following cmdlet to enable auditing of the owner:

> Set-Mailbox -Identity "Mr. Mel-Bin" -AuditEnabled $true -AuditOwner Create,SoftDelete,HardDelete,Update,Move,MoveToDeletedItems

That does not return any output. Then, I move some messages in the mailbox using IMAP client and peform the following cmdlet to see if the auditing worked:

>Search-MailboxAuditLog -Identity bfernan -LogonTypes Owner -ShowDetails -StartDate 10/9/2011

This returns no output. Is there something I am overlooking or does Exchange 2010 just not audit IMAP access?

share|improve this question
    
You are setting the owner audit properties. Are you using the "Mr. Mel-Bin" account to log in through IMAP? –  syneticon-dj Oct 8 '11 at 20:29
    
@syneticon-dj yes I am. –  Beaming Mel-Bin Oct 8 '11 at 22:34
    
Mmh. Could you add the -ShowDetails parameter to Search-MailboxAuditLog? –  syneticon-dj Oct 9 '11 at 9:02
    
@syneticon-dj I modified the command. This one returns no output. –  Beaming Mel-Bin Oct 9 '11 at 15:10
3  
I have no further questions, your honor. But no ideas either. It would not be the first time when certain kind of functionality is limited to MAPI acces. You might ask in the support forum for an official statement - Microsoft employees which could simply ask the responsible product group are reading and answering there. –  syneticon-dj Oct 11 '11 at 7:47
show 2 more comments

1 Answer

  • Is IMAP configured to report the changes back to the server? Or is it just doing the move "locally"?
  • Have you tried with e.g. OWA to see if auditing works using plain exchange?
  • You use 2 different "-Identity" strings, can you use the same for both commands?
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.