Can we monitor who logs into our Microsoft Outlook Web Access system? 
If so how do we do this?

Hi  inenco500,

Here you go (click on the links for more details) -

How can I monitor Outlook Web Access activity? 
1. Open Exchange Administrator, and navigate to the OWA server.
2. Select the server, and use the File, Properties command to open its
Properties dialog box.
3. Switch to the Diagnostics Logging tab, and select MSExchangeDS from
the list of components.
4. Set the logging level for Security, ExDS interface, Messaging API
(MAPI), Directory Access, Lightweight Directory Access Protocol (LDAP)
interface, and Name Resolution to maximum.
5. Expand the MSExchangeIS item in the component list.
6. Select the System item under MSExchangeIS, and set the logging
level for Connections and General to maximum.
7. Select the Private item under MSExchangeIS, then set the logging
level for General and Logons to maximum.
8. Stop and restart the IS.
"Once you do this, you'll see six or seven events logged each time an
OWA user logs on. You'll typically see event IDs 1170, 1136, 1137,
1007, and 1009, and you might see more than one of each. These events
will tell you who logged on and when. (See "XWEB: Diagnostic Logging
Levels for OWA Defined in the Exchange Administrator Program,"
Microsoft article Q246248, for more detail on the pertinent events.)"
http://www.windowsitpro.com/Article/ArticleID/21201/21201.html?Ad=1

MS Article: 246248
To monitor OWA client connections to the directory service and the
information store on the Exchange Server computer:
1. Start the Microsoft Exchange Server Administrator progam.
2. Click the server you want to monitor, and on the File menu, click Properties.
3. Click the Diagnostics Logging tab.
4. Click MSExchangeDS in the left pane, and in the right pane, set
Security, ExDS Interface, MAPI Interface, Directory Access, LDAP
Interface, and Name Resolution to Maximum.
5. Click the plus sign (+) by MSExchangeIS in the left pane, click
System, and then in right pane, set Connections and General to
Maximum.
6. Under MSExchangeIS, click Private, and set General and Logons to Maximum.
http://support.microsoft.com/kb/q246248/

I hope this helps. If you have any questions, please post a
clarification request *before* closing/rating my answer and I'll be
happy to reply.

Thank you,
hummer

Google Search Terms Used: monitor outlook web access activity

---

Request for Answer Clarification by inenco500-ga on 30 Jun 2005 04:18 PDT

Is the OWA server the same as our internal email server.  I ask
because I cannot find the Security, ExDS interface, Messaging API
(MAPI), Directory Access, Lightweight Directory Access Protocol (LDAP)
interface in the MSExchangeDS right hand pane.

All I can find is MSExchangeDSAccess and in the right hand pane is
only General, Cache, Topology, Configuration, LDAP.

Am I in the wrong section?

---

Clarification of Answer by hummer-ga on 30 Jun 2005 06:22 PDT

Hi inenco500,

Read this article, it may help you to figure out where you are going amiss.

Microsoft Exchange 2000 Server Maintenance, Monitoring, and Queuing:
Diagnostics Logging tab Figure 15-5.
note: "Maximum Provides a complete audit trail of every action that a
service performs. At this level, Exchange Server records everything
they're doing, and, as a result, server performance is severely
affected. You'll need to watch the log files closely when you use this
level. If you don't, they may run out of space."
http://www.microsoft.com/technet/prodtechnol/exchange/2000/maintain/15x2kada.mspx

What version of MS Exchange Server do you have?
hummer

---

Clarification of Answer by hummer-ga on 30 Jun 2005 07:41 PDT

Inenco500, I will be gone from my desk for the rest of the day so I'm
sorry that I won't be able to respond to you quickly. I'll check back
in when I return.  hummer

---

Request for Answer Clarification by inenco500-ga on 30 Jun 2005 08:40 PDT

Hello Hummer,

We have MS Exchange Server 2003 running on MS Server 2000.

---

Clarification of Answer by hummer-ga on 01 Jul 2005 07:12 PDT

Hi inenco500,

I'm very sorry to be so late in getting back to you. Our ISP has been
down since last night and I was unable to get online until this
morning.

I've been trying to come up with a solution for you this morning but
I'm sorry to say that I haven't had any luck.  I suspect your issue is
with the Exchange 2003 running on Server 2000 as the reason why
MSExchangeDS is not available but that's about as far as I can go. My
answer is correct in that I've given you instructions how to monitor
Outlook Web Access activity which will tell you who logged on and
when.  Therefore, perhaps the best thing to do would be to post a new
question and ask how to get it to work on your system. If you prefer,
I could ask the editors to remove my answer, just let me know (if so,
don't close/rate it).

Thank you for your patience, please accept my apologies for not being
able to work on this last night and for not being able to help you
further.

Sincerely,
hummer

---

Request for Answer Clarification by inenco500-ga on 05 Jul 2005 01:20 PDT

Hello Hummer,

Thank you very much for all your time and efforts on this.  I will
look to see if the problem is as you say with Exchange 2003 and Server
2000.

I am most appreciative of your efforts to help me.

---

Clarification of Answer by hummer-ga on 05 Jul 2005 16:27 PDT

Dear inenco500,

Thank you for your nice note, I truly appreciate it. It bothers me
that I wasn't able to figure this one out for you so I'll keep an eye
open on my cyber travels and let you know if I come up with something.
Likewise, I'd like to hear if you ever have better luck.

Take care,
hummer

Hummer was very helpful and I am most pleased with his efforts.