1. Introduction

Lepide Data Security Platform lets you audit owner and non-owner access to mailboxes in Exchange Server. This guide will take you through how to enable this feature.

2. Configure Mailbox Access Auditing

The Lepide Data Security Platform allows you to configure the auditing of Exchange Mailboxes while adding a domain or modifying its listing. Follow the steps below to configure these settings:

• From the Lepide main console, select Settings

• From the tree structure on the left-hand side, click on the domain node

• From the Actions options on the right-hand side of the screen, choose Properties

• From here, click on Advanced Domain Configuration (tree structure to the left-hand side) and the following screen appears:

• Make sure that Change Audit Exchange Server and Non-owner Mailbox Access Auditing boxes are checked both on top and in the list.

• Now, click the    icon for Non-Owner Mailbox Auditing to configure the auditing options for Exchange Mailboxes. It displays the following wizard.

• Select any of the following options.

  • All Mailboxes: Select this option to audit the accesses to all mailboxes by default.

  • Selected Mailbox(es): Select this option to audit the selected mailbox(es). Follow the steps below to choose the mailbox(es).

    • Select the option Selected Mailbox(es). It enables the further two more options located below.

      • Import from Text (txt) File: Select this option to import the names of mailboxes from a text file. Click  icon to access the following dialog box.

Select the location where the file is stored and then select the required txt file. Click Open to open the file and go back to the previous dialog box, which now shows the selected txt file.

Click   button to add the names of mailboxes from the text file to the table.

• Enter Mailboxes Names: Select this option to type the names of mailboxes in the text box itself. Make sure to separate the mailboxes' names with a space and semicolon ( ;).

• Click the   button to add the mailboxes, which have been entered in the text box.

• The mailboxes added using any of the above methods are displayed in the table at the bottom.

• • To remove any of the listed mailboxes' names, select a mailbox from the list and click   button. An attempt to remove a name from the list triggers the following warning message.

• • Click Yes to remove the selected mailbox(es) from this list.

  • Check the option Search Mailbox(es) with exact name to search the mailboxes that contain exactly the words you have entered.

• In this test case, we are selecting the option All Mailboxes.

• Once you are done, click Next to proceed.

• The option to select audit types appears. Here you will need to select the audit types for which the auditing has to be performed on the selected mailboxes.

• Let us have a look at the available auditing type categories.

• Audit Delegate: This lets you audit the selected mailboxes for access by the delegated users. It contains the following auditing types:

  • Create

  • Copy

  • FolderBind

  • SoftDelete

  • HardDelete

  • Move

  • MoveToDeletedItems

  • SendAs

  • SendOnBehalf

  • Update

• Audit Admin: This lets you audit the selected mailboxes for access by Exchange Administrators. It contains the following auditing types:

  • Create

  • Copy

  • FolderBind

  • SoftDelete

  • HardDelete

  • Move

  • MoveToDeletedItems

  • SendAs

  • SendOnBehalf

  • MessageBind

  • Update

• Audit Owner: This lets you audit the selected mailboxes for access by the mailbox owners themselves. It contains the following auditing types:

  • Create

  • SoftDelete

  • HardDelete

  • Move

  • MoveToDeletedItems

  • Update

• As the option of Non-Owner Mailbox auditing was checked while adding or modifying the domain, the non-owner audit types such Audit Delegate and Audit Admin types are already selected.

• You can scroll down in the dialog box and can select the audit types for Audit Owner.

• Click Next once you have selected the required Auditing Types.

• Click Next

• Now, the last step to configure the mailbox auditing appears.

• The existing auditing types, newly selected auditing types, and the auditing status for the mailboxes are displayed.

• You can click any individual entry in the Existing Auditing Type(s) column to view the already existing auditing types for a mailbox.

• Click the same entry in the New Audit Type(s) cell to view the newly selected auditing types.
  

You can modify the audit types by checking the unselected audit types and unchecking the selected types.

If the auditing status of any selected mailbox is Disabled then it will be enabled once you click Finish button.

• Click Finish to apply the selected auditing types on the selected mailboxes. 

• Once finished, a successful message confirming the process completion is displayed onscreen.

• Click OK to complete the process and close the Configure Mailbox Auditing wizard.

You can follow the same steps to enable the auditing for all mailboxes.