Audit non-owner mailbox activity
There are two types of Exchange non-owners who are authorized to access users' mailboxes for security and maintenance - administrators and delegated users. Therefore, we cannot say for sure that every non-owner mailbox access in Exchange indicates a security breach. That's why it's essential to validate whether non-owner mailbox activities are in line with the business context to accurately identify anomalies. This is where Exchange Reporter Plus' reporting and auditing capabilities step in. What
PowerShell vs. Exchange Reporter Plus: Mailbox size statistics
One of the key things an Exchange administrator does is monitor mailbox sizes. Email is the primary means of workplace communication. As the number of emails exchanged in an organization increases, so does mailbox size. You need insight into how the average user in your organization is consuming mailbox space for better capacity planning and resource management. Monitoring mailbox size using PowerShell scripting: The Get-MailboxStatistics cmdlet is widely used to fetch mailbox size insight. The PowerShell
Exchange Reporter Plus 5300 released with new reports and features
Hello Everybody, We are glad to announce the release of the latest build of Exchange Reporter Plus - 5300. This build comes with new features on auditing, enhancements, along with some bug fixes. Highlight: Exchange Reporter Plus can now be integrated with Log360, a log management and Active Directory auditing solution. New Features: Exchange Reporter Plus now includes the following two reports that track permission changes under the Folder Access Permissions changes category. Mailbox Folder Permission
Exchange Reporter Plus 5402 released with security enhancements
Hello Everybody, We are glad to announce the release of the latest build of Exchange Reporter Plus - 5402 Enhancements: Option to encrypt keystore password while configuring SSL (HTTPs). Bug Fixes: Issue where graphs were not included in reports exported in PDF and HTML formats is now fixed. Authentication issue in configuring the Skype for Business Server is fixed. Various other bug fixes. How to update? Update using service pack. New to Exchange Reporter Plus? Download the fully-functional
How do I get detailed reports on Skype for Business audio and video calls?
Organizations use Skype for Business for improved communication and collaboration within and between teams. Skype's audio and video calls are particularly useful for employees to talk to each other and get work done on time. Exchange Reporter Plus' granular reports on the Skype for Business server allow you to: Get information about all audio and video calls—failed or otherwise. Identify users who make the most audio and video calls. Check unassigned numbers and the routing rules assigned to those
How do I monitor Skype for Business IMs in my organization?
Instant Messaging (IM) allows users in your organization to communicate with each other using text messages. To keep this communication going, you need to keep an eye on how IM is being used in your organization and if there have been any configuration changes. Exchange Reporter Plus allows you to: Get information about all IMs between users. View the users with the most IM sessions. List details about your users' IM sessions with external users. View the IM filters configured in your organization.
[New] How do I report on Skype for Business conferences using Exchange Reporter Plus?
As you may have noticed from this forum post, Exchange Reporter Plus has recently added a whole new tab to report on Skype for Business servers. With these new reports, Exchange Reporter Plus has become the go-to solution for when you want to analyse different aspects of messaging in your organization. As an administrator, you need to have details about Skype conferences by your side. You need information about conference attendees to pass compliance audits. Additionally, you also need to keep
Exchange Reporter Plus 5400 released with Skype support
Hello Everybody, We are glad to announce the release of the latest build of Exchange Reporter Plus - 5400 New Feature: Skype for Business Server reporting: Exchange Reporter Plus now provides granular reports on audio/video calls, conferences, file transfers, instant messaging (IM) users, and so much more. Enhancements: License Management has been enhanced and now supports filtering based on databases, servers, hidden mailbox, and more. The sAMAccountName attribute can now be viewed in the following
How do I pass the GLBA compliance audit using Exchange Reporter Plus?
If your organization provides financial services in any way to customers, you need to comply with the Gramm-Leach-Bliley Act (GLBA). The GLBA primarily deals with employing access control measures to avoid unauthorized access to financial data. Exchange Reporter Plus helps you comply with the GLBA by allowing you to: Track admins' mailbox activity. Audit delegated mailbox activity. Identify non-owner mailbox logons. List deleted and moved emails. Track changes to mailbox permissions. View permissions
Email traffic reports do not included shared mailboxes
Exchange Report Plus 5.3 b5300 with Exchange 2013 CU20. It appears that none of the email traffic reports included shared mailboxes. The only shared mailbox reports for on-prem Exchange are under Organization/Shared Mailbox Reports and those reports only provide a list of shared mailboxes and permissions for them, while Exchange Online reports do include more shared mailbox reporting, like traffic, size, etc. Is there some way to get email traffic on shared mailboxes for on-prem exchange? I am looking
How do I pass the PCI DSS compliance audit using Exchange Reporter Plus?
The Payment Card Industry Data Security Standard is for organizations that deal with credit and debit card transactions. Such organizations are required to have secure environments to avoid breaches that can compromise customers' data. Since this mandate requires strong access control measures, Exchange Reporter Plus lets you: Track non-owner mailbox access. Audit permissions based on mailboxes and users. Detect failed OWA logon attempts. Monitor the number of emails sent to/received from external
How do I pass the HIPAA compliance audit using Exchange Reporter Plus?
The Health Insurance Potability and Accountability Act (HIPAA) requires organizations to store, transmit, and process health information securely. Healthcare organizations and companies that deal with health insurance need to comply with HIPAA. HIPAA requires organizations to store data securely and ensure no unauthorized access to data takes place. It also requires retention of medical records, policies, and other documents for up to six years. While HIPAA doesn't directly refer to emails, emails
How do I pass the SOX compliance audit using Exchange Reporter Plus?
A few weeks back, we discussed how Exchange Reporter Plus helps you comply with various regulatory mandates. There are several industry regulations on messaging compliance that you need to adhere to, to ensure your email data is secure. What is the Sarbanes-Oxley Act (SOX)? SOX primarily deals with the protection of financial information. It doesn't directly refer to emails, but you still need to ensure that an email containing financial data is transferred securely. Some requirements of SOX include:
How do I add custom LDAP attributes in Exchange Reporter Plus?
The latest release (build 5310) of Exchange Reporter Plus allows you to add custom attributes from the extended AD schema to get more details from its reports. To associate your custom attributes with Exchange Reporter Plus, Go to the Admin tab. Under the Configurations category, choose LDAP Attributes. Click the Add Attribute button. Enter your Display Name and LDAP Name. Choose the Data Type from the drop-down menu provided. Select the Associated ObjectClass(es). Click Add.
Exchange Reporter Plus 5310 released with custom attribute support
Hello Everybody, We are glad to announce the release of the latest build of Exchange Reporter Plus - 5310. New Features: Exchange Reporter Plus now allows you to add custom attributes from the extended AD schema to get more details from its reports. Bug Fixes: Issue while applying ppm continuously without closing the 'Update Manager' window. Issue with Mailbox Size report if private stores' hard quota limit is zero. How to update? Update using service pack. New to Exchange Reporter Plus? Download the
How do I monitor the number and size of messages in my organization's mailboxes?
Mailboxes form the backbone of Exchange Servers and you need to monitor their size, traffic, and other properties constantly. To keep an eye on usage trends, you need to check the number and size of messages present in mailboxes in your organization. Exchange Reporter Plus lets you view: The number and size of messages in mailbox folders. A summary of the size and count of messages based on: Mailboxes Servers Databases Months Years To access these reports: Go to the Reporting tab. Select the desired
How do I audit technician activity in Exchange Reporter Plus?
Exchange Reporter Plus' role-based access control functionality allows even the technologically naive to access the tool through the technician login. Amongst other things, technicians can export any of Exchange Reporter Plus' 300+ reports to specified destination folders in CSV, PDF, XLS, and HTML formats. Exchange Reporter Plus helps you view details about technicians who have exported reports, including the technician's name, reports exported, and the time of exporting. Accessing the Technician
How do I get insights into Exchange Server health?
An Exchange environment undergoes modifications every single day. Keeping track of the health and performance of its various components is vital, which is why Exchange Reporter Plus provides a Monitoring Dashboard to assist you. Accessing the dashboard: Go to the Monitoring tab. Click any of the links under Overview. Dashboard components: Exchange Reporter Plus helps you monitor the health of various aspects of your Exchange environment, including: CPU and memory utilization: Get complete details
Tip #5: Configuring archiving in Exchange Reporter Plus.
Since Exchange Reporter Plus is a reporting tool, it leads to accumulation of historical data and database growth. While some reports are cleaned up after a particular time period, most of the data remain. The Auditing and Monitoring reports, especially, are retained in order to ensure compliance and maintenance of Server health. To control database growth over time, enable archiving. Exchange Reporter Plus allows you to archive its Auditing and Monitoring reports. To archive a report, follow these
Exchange Reporter Plus 5301 released with security enhancements
Hello Everybody, We are glad to announce the release of the latest build of Exchange Reporter Plus - 5301. Highlight: Exchange Reporter Plus now allows you to: Password-protect exported data. Audit technician activity to view the reports exported and the time at which they were exported. Provide controlled access for delegated roles. Mask important data such as storage paths and IP addresses. Send password expiration notifications to make administrator account users change their passwords every 45
Exchange Reporter Plus Fixes and Enhancements [2018]
For Exchange Reporter Plus Fixes and Enhancements for 2019, click here. Version 5.4 Build 5402 (16th Aug 2018) Enhancements: Option to encrypt keystore password while configuring SSL (HTTPs). Bug Fixes: Issue where graphs were not included in reports exported in PDF and HTML formats is now fixed. Authentication issue in configuring the Skype for Business Server is fixed. Various other bug fixes. Version 5.4 Build 5400 (20th Jul 2018) New Feature: Skype for Business Server reporting: Exchange Reporter
How do I use Exchange Reporter Plus to comply with the GDPR?
The General Data Protection Regulation (GDPR) will be here by the end of this week. If your organization is in the European Union (EU) or services EU customers in any way, you need to comply with the GDPR. Emails carry personal data and, as an administrator, you need to make sure they're secure. Exchange Reporter Plus helps you comply with the GDPR by allowing you to: Locate messages based on keywords in their content. Filter messages based on attachments' name, type, and extension. Audit changes
What admin audit log reports does Exchange Reporter Plus have?
If your IT infrastructure team has multiple members, you must be familiar with how difficult it is to keep track of individual changes. You need Exchange Reporter Plus' Admin Audit Log reports to find out who made what change and when. To access the Admin Audit Log reports: Go to the Auditing tab. Click the Advanced Audit reports link. Select any report under the Admin Audit Log category. How these reports help: Exchange Reporter Plus' Admin Audit Log reports help you: Audit mailbox permission changes.
Tip #9: Audit folder permission changes using Exchange Reporter Plus.
As an Exchange administrator, you need to remain vigilant about every aspect of your users' mailboxes. One key task you need to perform regularly is auditing changes to mailbox folder and public folder permission to ensure no rogue user gains access to business-critical information. Exchange Reporter Plus allows you to audit folder permission changes through the following reports: Mailbox folder permission changes Public folder permission changes To audit folder permission changes: Go to the Auditing
Tip #8: Audit DAG failovers using Exchange Reporter Plus.
As an administrator, you must know how painful database failovers are. They can cause unavailability of messaging options and communication loss for your employees, and you have to check your failover event logs to find out what caused the failover. Analyzing logs can be a complex and time-consuming process, which is why you need Exchange Reporter Plus' DAG Failover audit report. This report helps you monitor DAG failover logs and find reasons for the failovers for Exchange Servers 2010, 2013, and
[KB] How do I check users' permissions over Exchange shared mailboxes?
Shared mailboxes help teams collaborate with each other, but they also come with certain security issues. If yours is a growing business, your organization may be hiring more employees. A new hire could inadvertently inherit access to an important shared mailbox carrying business-critical information. To avoid problems caused by unintentionally inherited access rights, you need to keep an eye on shared mailbox permissions. Solution: Exchange Reporter Plus provides two reports that allow you to
Tip #7 Setting up alerts in Exchange Reporter Plus
Your Exchange environment undergoes modifications day after day, and as an administrator, you need to be vigilant about any change in your organization. Using the Exchange event logs to identify changes is, however, a very time-consuming process, especially when you're investigating a data breach in your organization. That's why Exchange Reporter Plus is your best option if you want instant notifications about Exchange modifications. Exchange Reporter Plus allows you to receive real-time alerts each
Tip #6: Scheduling reports in Exchange Reporter Plus.
Exchange Reporter Plus allows you to generate reports both on demand and by scheduling them. These reports are provided by gathering data on various Exchange components. Steps to schedule a report: Click the Admin tab and go to Report Scheduling. Select the Schedule New Report button on the top right corner of the page. Specify the Schedule Name and Schedule Description. Select a Report Category and a specific report under the category using the drop-down menus shown on the screen. Use the Generate
Tip #4: Tracking messages based on their content.
Last week, we looked at how you can customize pre-packaged reports in Exchange Reporter Plus. Now, let's see how you can see specific emails exchanged in your organization based on certain keywords they have in their content. Scenario: Let's assume you've come to know that users in organizations similar to yours are receiving bulk marketing emails that could be spam. You also learn that these emails usually have the word "lottery" in the subject line. Customizing the Mail Search reports: To identify
Tip #3: Customize the pre-packaged reports in Exchange Reporter Plus."
Exchange Reporter Plus offers over 300 unique reports on various aspects of your Exchange Servers and Exchange Online environment. In addition to prepackaged reports, the tool also allows you to customize reports to be created for specific criteria. You can build custom reports for: Unread emails Mailbox folder statistics Email content for both mailboxes and public folders Room mailboxes Email response time Mailbox folder permissions Depending on the type of report you're building, you can customize
Tip #2: Identifying users with forwarding addresses.
The employees in your organization may have set inbox rules to forward and redirect incoming messages when they're away from office. Exchange Reporter Plus lets you easily identify users who have inbox rules enabled. For on-premises Exchange Servers: Click the Reporting tab. Go to General Reports → Click the Forward Set Inbox Rules report. For Exchange Online: Click the Exchange Online tab. Go to General Reports → Click the Mailbox with ForwardTo report. This way, you can easily view the forwarding
Tip #1: Getting real-time alerts about mailbox size.
Emails are the primary means of communication in any workplace. But as emails pile up, mailbox size limits could be reached. This is particularly troublesome for admins when the C Suite and other executives in your organization are involved, because they could lose out on important, business-critical emails. How do you know when mailbox size limits are reached? Exchange Reporter Plus gives you an alert when mailboxes in your organization reach their size limits. To configure alerts: Go to Monitoring
Exchange Reporter Plus Service Pack 5210 Released
Hello Everybody, We are glad to announce the release of Service pack with the much awaited features and enhancements. Find the new features and enhancements below. New Feature: DAG monitoring and auditing: Exchange Reporter Plus adds the capability to monitor DAG health and activation preference, and also audit DAG failovers. Changes & Enhancements: The CPU Utilization monitoring report has been improved for better performance, and reduced usage of memory (RAM and storage) in the server where the
Usernames shown as
While adding mailboxes to monitor, after a few pages some of the names come up as "null null". We have no users with that name.
Monitoring of Mailbox Stores
We have had a number of incidents where our mailbox store is 'stuck' at a mounting state. Can Exchange Reporter monitoring tools/reports pick this up. I believe it can pick up if the mailbox store is dismounted, but this is sort of a halfway scenario. regards Koz
Evaluation Limitation 25 mailbox -question
Hi We're evaluating the Exchange Reporter PLUS in our LAB Currently managed by our test is 25 mailbox What will happened in my LAB if mailbox user is more than 25 ? My I know if the "Exchange Reporter PLUS " will stop the reporting or will collect data randomly in different mailbox? Please advise what is behavior if the mailbox is user is more than 25 ? since we're using in the ALB is evaluation only
Get your questions answered through our brand new Community Learning Series!
Hey there! As you may have noticed, every Wednesday for the past few months, we've posted Tips and Tricks on how Exchange Reporter Plus helps you address common Exchange problems. Now, we're going to continue doing that, but in a new series of posts called the Community Learning Series You get to choose the topics. It all rests on you! We want to tailor our how-to posts to suit your needs. So if you have any question about your Exchange environment or Exchange Reporter Plus, ask away! You can even
Filtering
Hi, Would it be possible to add more filtering options? In particular, I'm looking to be able to filter by "Caller User Name" in the Non - owner Mailbox Logon report. When I try to add filtering here, I'm only presented with Server, Mailbox Database, and Domain. Attached is a picture of what I see in the filter options. Thank you!
[KB] How do I check the permissions users have over calendars?
There are quite a few sharing and publishing permissions users can have over calendars. Only owners and trusted delegates should have access to important users' calendars in your organization. Other users should be limited to just permissions to view the status (busy and free hours). Rogue users with author or editor permissions over calendars can create problems for your C-suite's schedules. To avoid such issues, you need to monitor users' and groups' calendar folder permissions. Solution: Exchange
Deleting Domain from auditing
Can I delete domain from auditing configuration, I have 3 domains and I need to delete one domain?
Next Page