Is there a way to see when an email account was accessed. By who and when?

Question asked by James Tlen - 8/29/2019 at 12:59 PM

Answered

I have a client that would like to know if a certain email account was accessed on a certain day and by who. Is this something that is possible?

5 Replies

Reply to Thread

Employee Replied

8/29/2019 at 2:46 PM

Employee Post Marked As Answer

Hi James,

If the Administrative logs are set to detailed you can see login attempts when you search there. You'll see the protocol or if it's webmail, the attempt, and whether it was a success or failure. It should look something like this:

[2019.08.29] 14:36:03.468 [70.187.200.22] Webmail Attempting to login user: admin
[2019.08.29] 14:36:03.468 [70.187.200.22] Webmail Login successful: With user admin

[2019.08.29] 14:42:20.629 [70.187.200.22] Webmail Attempting to login user: abc@example.com
[2019.08.29] 14:42:20.629 [70.187.200.22] Webmail Login successful: With user abc@example.com

James Tlen Replied

8/29/2019 at 4:45 PM

Thank You. I will check this out.

echoDreamz Replied

9/3/2019 at 12:33 PM

Honestly, it would be great if like say, the last x number of successful login attempts (different IPs) were logged. If the user logs in from the same IP all the time, just keep updating that record, then if you user logs in from a different IP, add it to the list with the date/time etc.

This would help users monitor their own accounts.

Kyle Kerst Replied

9/4/2019 at 4:07 PM

Employee Post

Christopher - I've added this as a feature request as its a great idea! Would be good for a user to know right away when an unfamiliar location logs in to their account.

Kyle Kerst Lead Internal Network/System Administrator SmarterTools Inc. smartertools.com

Tim DeMeza Replied

9/5/2019 at 6:27 AM

This is very similar to what I was asking for a while ago. I thought I would link the idea that never got traction.

User Connecting from too many unique IP addresses

Thanks!

Back to Community Threads

Please leave this box unchecked

Reply to Thread

Enter the verification text