RSS

exchange server 2010 的管理审计

18 Apr

exchange server 2010 可以进行管理审计了,命令为Set-AdminAuditLogConfig

开启审计

   1: Set-AdminAuditLogConfig -AdminAuditLogEnabled $True
   2: Set-AdministratorAuditLogConfig -AdministratorAuditLoggingEnabled $True

查看审计的设定

Get-AdminAuditLogConfig

示例如下

审计使用的命令

   1: Set-AdminAuditLogConfig -AdminAuditLogCmdlets *
   2: Set-AdminAuditLogConfig -AdminAuditLogCmdlets New-Mailbox
   3: Set-AdminAuditLogConfig -AdminAuditLogCmdlets *TransportRule
   4: Set-AdminAuditLogConfig -AdminAuditLogCmdlets *Management*
   5: Set-AdminAuditLogConfig -AdminAuditLogCmdlets Set-Transport*
   6: Set-AdminAuditLogConfig -AdminAuditLogCmdlets New-Mailbox, *TransportRule, *Management, Set-Transport*

审计使用的开关


   1: Set-AdminAuditLogConfig -AdminAuditLogParameters *
   2: Set-AdminAuditLogConfig -AdminAuditLogParameters Database
   3: Set-AdminAuditLogConfig -AdminAuditLogParameters *Address*
   4: Set-AdminAuditLogConfig -AdminAuditLogParameters Custom*
   5: Set-AdminAuditLogConfig -AdminAuditLogParameters *Region
   6: Set-AdminAuditLogConfig -AdminAuditLogParameters Database, *Address*, Custom*, *Region

审计邮箱

Set-AdminAuditLogConfig -AdminAuditLogMailbox david@contoso.com

涉及到该邮箱的操作都会被记录

Advertisements
 
 

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: