[cisco-voip] Single Inbox Exchange audit logs

[Brent Pollock]

Need help determining the importance of the following log messages from
exchange. Single Inbox impersonation account appears to create an abundant
amount of traffic and raises some concern for our Exchange Team.


Time:        5/29/2013 12:51 PM
Performed by:        XXXXXXXX,Service Account
Signed in as:        Internal user without delegate access
Operation:        Move to Deleted Items
Subject:        Message from MICROSOFT CORP (4258828080)
Source:        Inbox
Status:        Partially succeeded

Time:        5/29/2013 12:51 PM
Performed by:        XXXXXXXX,Service Account
Signed in as:        Internal user without delegate access
Operation:        Move to Deleted Items
Subject:        Message from MICROSOFT CORP (4258828080)
Source:        Inbox
Status:        Partially succeeded

Time:        5/29/2013 12:51 PM
Performed by:        XXXXXXXX,Service Account
Signed in as:        Internal user without delegate access
Operation:        Move to Deleted Items
Subject:        Message from Jon Klein (8521155)
Source:        Inbox
Status:        Partially succeeded

Time:        5/29/2013 12:51 PM
Performed by:        XXXXXXXX,Service Account
Signed in as:        Internal user without delegate access
Operation:        Move to Deleted Items
Subject:        Message from Jon Klein (8521155)
Source:        Inbox
Status:        Partially succeeded
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20130607/510b0b3f/attachment.html>