Have you looked at MOM? Here is a little something on the subject: http://searchexchange.techtarget.com/tip/0,289483,sid43_gci1112752,00.ht ml http://www.msexchange.org/tutorials/Auditing-Mailbox-Access-Exchange-Sys tem-Manager-Event-Viewer.html George Taylor Systems Programmer Regional Health Inc. _____ From: Allen, Christine [mailto:Christine.Allen@xxxxxxxxxxxxxxxxxxxxx] Sent: Wednesday, April 04, 2007 7:09 AM To: 'exchangelist@xxxxxxxxxxxxx' Subject: [ExchangeList] Exchange Auditing Has anyone come across any third party auditing tools that will audit Exchange server 2003 mailbox access extensively. I have enabled auditing and using event COM to pull out the 1016's, however this is pulling everything and what we want to know is out of the 6 of us that have rights to actually logon go mailboxes they want to make sure we are being honest. See what we accessed (i.e. inbox, calendar, contacts, etc.) Does anyone know of a tool that does this? Thanks in advanced. Christine Allen Systems Engineer Electric Insurance Company 75 Sam Fonzo Drive Beverly, MA 01915 phone: 978-524-5612 fax: 978.236.5612 christine.allen@xxxxxxxxxxxxxxxxxxxxx http://www.electricinsurance.com <http://www.electricinsurance.com> ***Note: The information contained in this message, including any attachments, may be privileged, confidential, and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the Sender immediately by a "reply to sender only" message and destroy all electronic or paper copies of the communication, including any attachments.