Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have exchange 2010 with outlook web access. How can I get a log of all log in attempts?

share|improve this question

A combination of the IIS logs on the OWA server and the Security Event Log on the Domain Controller(s) where the logons are validated will give you all the detail you're looking for. You can probably get everything you want from just the IIS log, ultimately, but artifacts of the attempted logon will be present in both.

Of course, this is assuming that your Domain Controllers have a sane security policy that audits successful and failed logon events and that you've got IIS logging running on the OWA server. Obviously, if you're not logging things then there's nowhere to look.

share|improve this answer
Thanks a lot for your answer! Can you elaborate more on how to set this up exactly? – BetaRide Oct 26 '11 at 5:27

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.