Guide to the Secure Configuration and Administration of Microsoft ...

Server Level
At the server level, the logons feature and diagnostic logging are of interest.
There are no specific security settings in relation to the logons feature. The intent of the
feature is to provide an easy way to determine who is logged onto the Information Store
at any given time.
To determine whom is logged onto the Private Information Store via the Exchange
Administrator tool:
Select the Private Information Store object under the server object. Then select
File/Properties and the “Logons” tab.
To determine whom is logged onto the Public Information Store:
Select the Public Information Store object under the server object. Then select
File/Properties and the “Logons” tab.
The diagnostic logging feature of the Information Store is identical in function to that of
the Directory Store, as described above. It is recommended that diagnostic logging be
enabled for a number of events related to both the private and Public Information Stores.
To enable diagnostic logging for the Private Information Store, via the Exchange
Administrator tool:
Select the Private Information Store object under the server object. Then select
File/Properties and the “Diagnostics Logging” tab. Highlight the
MSExchangeIS/Private object. It is recommended to log the following at the
“maximum” level:
Logons
Access Control
Send On Behalf Of
Send As
Download
To enable diagnostic logging for the Public Information Store, from the Exchange
Administrator tool:
Select the Public Information Store object under the server object. Then select
File/Properties and the “Diagnostics Logging” tab. Highlight the
19