So I'm meandering through Diagnostics logging in Exchange 2003, and I'm trying to log Logons. My suspicion is that the Net Admin in my other studio is opening users' mailboxes in both studios without authorization. I want to nail this guy.
My understanding is that anything the Diagnostics Logging utility logs gets sent to the Application portion of the Event Viewer. I don't want this - I know he goes through the Event Viewer, and if he sees what I'm logging, he might stop what he's doing.
Any ideas?
My understanding is that anything the Diagnostics Logging utility logs gets sent to the Application portion of the Event Viewer. I don't want this - I know he goes through the Event Viewer, and if he sees what I'm logging, he might stop what he's doing.
Any ideas?