How to check how and when a user checked their Exchange 2010 mailbox?

We are trying to obtain the IP addresses and protocols (e.g., POP3, IMAP or MAPI) that a specific user had been using to connect to her mailbox.

How would we go about obtaining data?


Quick google search found Setting Network Connection Logging for Exchange Server

  1. Start the Exchange Server Administrator program, click Configuration, click Servers, click the , and then click Directory Service.
  2. Click on the Diagnostic Logging tab, and set the Logging level for MAPI Interface to "Maximum".