Non-owner mailbox access attempts are not reflected in reports.

Exchange
Reporting
6.5 and older
7.0-8.5
https://kb.netwrix.com/225
Copy Article URL Copied

Perform the following configuration steps on your monitored Exchange servers (depending of the Exchange server version):

For Exchange server 2003:

    1. Start the Microsoft Management Console (MMC) Exchange System Management snap-in.
    2. Expand your administrative group –> Servers.
  1. Right-click the Exchange Server and select Properties.
  2. Open the Diagnostics Logging tab.
  3. Under the Services List, expand the MSExchangeIS Service and select Mailbox.
  4. In the Categories list, select Logons, set logging level to Minimum and click Apply.
  5. Click OK.
  6. Navigate to Start –> Administrative Tools –> Services. Click Microsoft Exchange Information Store and restart the service.

For Exchange 2007/2010:

  1. Start the Exchange Management Shell.
  2. Run the following command: ‘Set-EventLogLevel “MSExchangeIS9000 PrivateLogons” -Level Low’
  3. Navigate to Start –> Administrative Tools –> Services. Click Microsoft Exchange Information Store and restart the service.
Go Up