Microsoft® Exchange Server 2003 Unleashed

Auditing the Environment

Auditing gathers and keeps track of activity on the network, devices, and entire systems. By default, Windows Server 2003 enables some auditing, although many other auditing functions must be manually turned on. Windows Server 2003 should be used with Exchange Server 2003 auditing to customize your auditing requirements and provide comprehensive amounts of information that can be analyzed.

Auditing is typically used for identifying security breaches or suspicious activity. However, auditing is also important to gain insight into how the Exchange Server 2003 systems are performing and how they are accessed. Exchange Server 2003 offers three types of auditing: audit logging, protocol logging, and message tracking.

Audit ...