We have exchange 2010 with outlook web access. How can I get a log of all log in attempts?
Asked
Active
Viewed 4,474 times
1 Answers
2
A combination of the IIS logs on the OWA server and the Security Event Log on the Domain Controller(s) where the logons are validated will give you all the detail you're looking for. You can probably get everything you want from just the IIS log, ultimately, but artifacts of the attempted logon will be present in both.
Of course, this is assuming that your Domain Controllers have a sane security policy that audits successful and failed logon events and that you've got IIS logging running on the OWA server. Obviously, if you're not logging things then there's nowhere to look.
![](../../users/profiles/7200.webp)
Evan Anderson
- 141,071
- 19
- 191
- 328
-
Thanks a lot for your answer! Can you elaborate more on how to set this up exactly? – BetaRide Oct 26 '11 at 05:27