How to View Current Exchange Auditing Logging Levels
Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.
Applies to: Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3
This topic explains how to use the Exchange Management Console and the Exchange Management Shell to view the current Exchange Auditing logging levels.
Before You Begin
To perform this procedure, the account you use must be delegated the following:
Local Administrator rights
Exchange Organization Administrators rights
For more information about permissions, delegating roles, and the rights that are required to administer Exchange Server 2007, see Permission Considerations.
To use the Exchange Management Console to view logging levels 0, 1, 3, and 5
Start the Exchange Management Console.
Expand Server Configuration, and then click Mailbox.
In the details pane, right-click the mailbox server for which you want to view the logging levels, and then click Manage Diagnostics Logging Properties.
Expand MSExchangeIS, and then expand 9000 Private.
Click each of the following categories to view the current logging level:
Extended Send As
Extended Send On Behalf Of
To use the Exchange Management Shell to view logging levels 0, 1, 3, and 5
Run the following command:
For detailed syntax and parameter information, see Get-EventLogLevel.
To use the Exchange Management Shell to view logging levels 2 and 4
Start the Exchange Management Shell, and then run the following command:
Set-Location "HKLM:\System\CurrentControlSet\Services\MSExchangeIS\Diagnostics\9000 Private"
Run the following command to list the logging levels that are currently set:
For detailed syntax and parameter information, see Get-ItemProperty.
For More Information
For more information about Exchange, see Understanding Mailbox Access Auditing with Exchange Server 2007 Service Pack 3.