How to check how and when a user checked their Exchange 2010 mailbox?
We are trying to obtain the IP addresses and protocols (e.g., POP3, IMAP or MAPI) that a specific user had been using to connect to her mailbox.
How would we go about obtaining data?
Quick google search found Setting Network Connection Logging for Exchange Server
- Start the Exchange Server Administrator program, click Configuration, click Servers, click the , and then click Directory Service.
- Click on the Diagnostic Logging tab, and set the Logging level for MAPI Interface to "Maximum".