We turned logging up to minimum on the ExchangeIS service so attempts to access mailboxes to which a user does not own would be logged in the application log. This is working fine, however we have been unable to find any success or failure logs to accompany
event id 1016. It appears that this event is logged whether a user has access to a mailbox or not. We need to know if the attempted logon was successful or not. Does anyone know if this is possible?
↧