This is an event from
Exchange
audit event from
LOGbinder EX
generated by
.
Enable-MailUser Exchange cmdlet issued
Occurred: 12/23/2012 3:22:47 PM
Cmdlet: Enable-MailUser
Performed by: sp2010.com/Users/Joe Taylor
Succeeded: Yes
Error: None
Originating server: SP2010-EX1 (14.02.0328.009)
Object modified: sp2010.com/Users/Test MailUser
Parameters
Name: Identity, Value: [testmailuser@sp2010.com]
Name: ExternalEmailAddress, Value: [smtp:newtestmailuser@testdomain.com]
Modified Properties
Name: MessageBodyFormat, Old Value: [Text], New Value: [TextAndHtml]
Name: ExchangeVersion, Old Value: [0.0 (6.5.6500.0)], New Value: [0.10 (14.0.100.0)]
Name: Extensions, Old Value: [], New Value: []
Name: PoliciesIncluded, Old Value: [], New Value: [{26491cfc-9e50-4857-861b-0cb8df22b5d7};9f175e9c-5823-48e5-8b05-e8c6abd6caa5]
Name: AddressListMembership, Old Value: [], New Value: [\All Users;\Default Global Address List;\All Recipients(VLV);\All Mail Users(VLV)]
Name: PoliciesExcluded, Old Value: [], New Value: []
Name: RecipientTypeDetails, Old Value: [User], New Value: [MailUser]
Name: ProtocolSettings, Old Value: [], New Value: []
Name: AcceptMessagesOnlyFromDLMembers, Old Value: [], New Value: []
Name: ArchiveName, Old Value: [], New Value: []
Name: ReadOnlyProtocolSettings, Old Value: [], New Value: []
Name: OriginalPrimarySmtpAddress, Old Value: [], New Value: [newtestmailuser@testdomain.com]
Name: ElcExpirationSuspensionEnabled, Old Value: [False], New Value: [False]
Name: RecipientTypeDetailsValue, Old Value: [None], New Value: [MailUser]
Name: ReadOnlyPoliciesIncluded, Old Value: [], New Value: [{26491cfc-9e50-4857-861b-0cb8df22b5d7};9f175e9c-5823-48e5-8b05-e8c6abd6caa5]
Name: WindowsEmailAddress, Old Value: [], New Value: [newtestmailuser@testdomain.com]
Name: HiddenFromAddressListsEnabled, Old Value: [False], New Value: [False]
Name: InternetEncoding, Old Value: [0], New Value: [1310720]
Name: RawExternalEmailAddress, Old Value: [], New Value: [SMTP:newtestmailuser@testdomain.com]
Name: ExtensionCustomAttribute4, Old Value: [], New Value: []
Name: ExtensionCustomAttribute5, Old Value: [], New Value: []
Name: ExtensionCustomAttribute2, Old Value: [], New Value: []
Name: ExtensionCustomAttribute3, Old Value: [], New Value: []
Name: EmailAddressPolicyEnabled, Old Value: [False], New Value: [True]
Name: ExtensionCustomAttribute1, Old Value: [], New Value: []
Name: GrantSendOnBehalfTo, Old Value: [], New Value: []
Name: RejectMessagesFrom, Old Value: [], New Value: []
Name: PrimarySmtpAddress, Old Value: [], New Value: [newtestmailuser@testdomain.com]
Name: MessageFormat, Old Value: [Text], New Value: [Mime]
Name: RejectMessagesFromDLMembers, Old Value: [], New Value: []
Name: ReadOnlyAddressListMembership, Old Value: [], New Value: [\All Users;\Default Global Address List;\All Recipients(VLV);\All Mail Users(VLV)]
Name: Alias, Old Value: [], New Value: [testmailuser]
Name: EmailAddresses, Old Value: [], New Value: [SMTP:newtestmailuser@testdomain.com;smtp:testmailuser@sp2010.com]
Name: ExternalEmailAddress, Old Value: [], New Value: [SMTP:newtestmailuser@testdomain.com]
Name: IndexedPhoneNumbers, Old Value: [], New Value: []
Name: SingleItemRecoveryEnabled, Old Value: [False], New Value: [False]
Name: CalendarVersionStoreDisabled, Old Value: [False], New Value: [False]
Name: AcceptMessagesOnlyFrom, Old Value: [], New Value: []
Name: RecipientType, Old Value: [User], New Value: [MailUser]
Name: LitigationHoldEnabled, Old Value: [False], New Value: [False]
Name: ReadOnlyPoliciesExcluded, Old Value: [], New Value: []
Name: UMDtmfMap, Old Value: [emailAddress:837862458737;lastNameFirstName:837862458737;firstNameLastName:837862458737], New Value: [firstNameLastName:837862458737;lastNameFirstName:837862458737;emailAddress:639837862458737]
Name: RecipientDisplayType, Old Value: [], New Value: [RemoteMailUser]
Name: OriginalWindowsEmailAddress, Old Value: [], New Value: [newtestmailuser@testdomain.com]
Name: LegacyExchangeDN, Old Value: [], New Value: [/o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=Test MailUserbe3]
Name: IsAclCapable, Old Value: [], New Value: [False]
Additional information: CmdletParameters/Parameter/Name= [Identity]; CmdletParameters/Parameter/Value= [testmailuser@sp2010.com]; CmdletParameters/Parameter/Name= [ExternalEmailAddress]; CmdletParameters/Parameter/Value= [smtp:newtestmailuser@testdomain.com]; ModifiedProperties/Property/Name= [MessageBodyFormat]; ModifiedProperties/Property/OldValue= [Text]; ModifiedProperties/Property/NewValue= [TextAndHtml]; ModifiedProperties/Property/Name= [ExchangeVersion]; ModifiedProperties/Property/OldValue= [0.0 (6.5.6500.0)]; ModifiedProperties/Property/NewValue= [0.10 (14.0.100.0)]; ModifiedProperties/Property/Name= [Extensions]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [PoliciesIncluded]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [{26491cfc-9e50-4857-861b-0cb8df22b5d7};9f175e9c-5823-48e5-8b05-e8c6abd6caa5]; ModifiedProperties/Property/Name= [AddressListMembership]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [\All Users;\Default Global Address List;\All Recipients(VLV);\All Mail Users(VLV)]; ModifiedProperties/Property/Name= [PoliciesExcluded]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [RecipientTypeDetails]; ModifiedProperties/Property/OldValue= [User]; ModifiedProperties/Property/NewValue= [MailUser]; ModifiedProperties/Property/Name= [ProtocolSettings]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [AcceptMessagesOnlyFromDLMembers]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [ArchiveName]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [ReadOnlyProtocolSettings]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [OriginalPrimarySmtpAddress]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [newtestmailuser@testdomain.com]; ModifiedProperties/Property/Name= [ElcExpirationSuspensionEnabled]; ModifiedProperties/Property/OldValue= [False]; ModifiedProperties/Property/NewValue= [False]; ModifiedProperties/Property/Name= [RecipientTypeDetailsValue]; ModifiedProperties/Property/OldValue= [None]; ModifiedProperties/Property/NewValue= [MailUser]; ModifiedProperties/Property/Name= [ReadOnlyPoliciesIncluded]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [{26491cfc-9e50-4857-861b-0cb8df22b5d7};9f175e9c-5823-48e5-8b05-e8c6abd6caa5]; ModifiedProperties/Property/Name= [WindowsEmailAddress]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [newtestmailuser@testdomain.com]; ModifiedProperties/Property/Name= [HiddenFromAddressListsEnabled]; ModifiedProperties/Property/OldValue= [False]; ModifiedProperties/Property/NewValue= [False]; ModifiedProperties/Property/Name= [InternetEncoding]; ModifiedProperties/Property/OldValue= [0]; ModifiedProperties/Property/NewValue= [1310720]; ModifiedProperties/Property/Name= [RawExternalEmailAddress]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [SMTP:newtestmailuser@testdomain.com]; ModifiedProperties/Property/Name= [ExtensionCustomAttribute4]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [ExtensionCustomAttribute5]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [ExtensionCustomAttribute2]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [ExtensionCustomAttribute3]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [EmailAddressPolicyEnabled]; ModifiedProperties/Property/OldValue= [False]; ModifiedProperties/Property/NewValue= [True]; ModifiedProperties/Property/Name= [ExtensionCustomAttribute1]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [GrantSendOnBehalfTo]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [RejectMessagesFrom]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [PrimarySmtpAddress]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [newtestmailuser@testdomain.com]; ModifiedProperties/Property/Name= [MessageFormat]; ModifiedProperties/Property/OldValue= [Text]; ModifiedProperties/Property/NewValue= [Mime]; ModifiedProperties/Property/Name= [RejectMessagesFromDLMembers]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [ReadOnlyAddressListMembership]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [\All Users;\Default Global Address List;\All Recipients(VLV);\All Mail Users(VLV)]; ModifiedProperties/Property/Name= [Alias]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [testmailuser]; ModifiedProperties/Property/Name= [EmailAddresses]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [SMTP:newtestmailuser@testdomain.com;smtp:testmailuser@sp2010.com]; ModifiedProperties/Property/Name= [ExternalEmailAddress]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [SMTP:newtestmailuser@testdomain.com]; ModifiedProperties/Property/Name= [IndexedPhoneNumbers]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [SingleItemRecoveryEnabled]; ModifiedProperties/Property/OldValue= [False]; ModifiedProperties/Property/NewValue= [False]; ModifiedProperties/Property/Name= [CalendarVersionStoreDisabled]; ModifiedProperties/Property/OldValue= [False]; ModifiedProperties/Property/NewValue= [False]; ModifiedProperties/Property/Name= [AcceptMessagesOnlyFrom]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [RecipientType]; ModifiedProperties/Property/OldValue= [User]; ModifiedProperties/Property/NewValue= [MailUser]; ModifiedProperties/Property/Name= [LitigationHoldEnabled]; ModifiedProperties/Property/OldValue= [False]; ModifiedProperties/Property/NewValue= [False]; ModifiedProperties/Property/Name= [ReadOnlyPoliciesExcluded]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= []; ModifiedProperties/Property/Name= [UMDtmfMap]; ModifiedProperties/Property/OldValue= [emailAddress:837862458737;lastNameFirstName:837862458737;firstNameLastName:837862458737]; ModifiedProperties/Property/NewValue= [firstNameLastName:837862458737;lastNameFirstName:837862458737;emailAddress:639837862458737]; ModifiedProperties/Property/Name= [RecipientDisplayType]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [RemoteMailUser]; ModifiedProperties/Property/Name= [OriginalWindowsEmailAddress]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [newtestmailuser@testdomain.com]; ModifiedProperties/Property/Name= [LegacyExchangeDN]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [/o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=Test MailUserbe3]; ModifiedProperties/Property/Name= [IsAclCapable]; ModifiedProperties/Property/OldValue= []; ModifiedProperties/Property/NewValue= [False]
For more information, see http://logbinder.com/support
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection