0

If a mailbox limit is set, is it possible to find out when and who made the change, by searching through event logs, is there an event ID specific to this that can be searched for.

Improve this question

1 Answer 1

Reset to default
2

Yes you can, the feature that you are looking for is called Administrator Audit Logging:

You can use administrator audit logging in Microsoft Exchange Server 2010 to record actions taken by a user or administrator that make changes in your organization. By keeping a log of the changes, you can trace a change to the person who made it. You can also augment your change logs with detailed records of the change as it was implemented, use the records to comply with regulatory requirements and requests for discovery, and so on. By default, audit logging is enabled in new installations of Microsoft Exchange Server 2010 Service Pack 1 (SP1).

Here is an excelent article explaining in detail how to use this feature:

Exchange 2010 Administrator Logging walk-through

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .