Microsoft Exchange Server 2013: Mailbox and High Availability

Auditing administrator actions

As even a brief reading of this book reveals, an administrator can change many settings and create many new objects that influence the way Exchange operates. Up to Exchange 2010, no facility was available to track who did what and when at an administrative level. The addition of Windows PowerShell and its ability to affect many objects with relatively simple commands reinforced the need to log what happens within an Exchange organization.

Exchange 2013 includes the ability to audit actions taken by administrators in EAC and EMS. This is intended to enable organizations to maintain records of who did what and when to execute the cmdlets that manage Exchange. Apart from providing definitive proof about which account ...