Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Like the subject says, I'm looking to find out who made a change to a public folder contact in Exchange 2010. I have a couple of use cases:

  • Who added these contacts?
  • Who deleted that contact?

I imagine they would have different places to look, but maybe not. Some kind of audit log in Exchange?

It looks like Public Folder Contacts - Exchange 2010 has the answer for my second use case, bummer.

share|improve this question
    
Same answer for "who added these contacts?", by the way. –  HopelessN00b Aug 20 '12 at 20:47
    
Yuck. Do you know what logs to turn on? There are a lot of options in there... –  Bill Weiss Aug 20 '12 at 22:54
    
In clarification, the "msexchangeis/9001 public/general" audit log doesn't seem to be logging changes (or I'm looking in the wrong place). Someone who's done it before would know for sure. –  Bill Weiss Aug 20 '12 at 22:56
    

1 Answer 1

up vote 0 down vote accepted

A call to Microsoft support said that, indeed, there isn't logging of this data. There's a tool one can get from Microsoft to dump the entire Exchange DB and look at the owner of each object, but that won't help with deleted contacts. It would show added contacts, but we would need to go look at the contact in question after it's changed. Lame.

share|improve this answer
    
What is the name of the tool? ESEDBViewer may help in this case. Either way, no auditing logs = no "who did this action," unless I missed something? –  mbrownnyc Feb 9 '13 at 21:18

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.