Send Knowledge Base Article
The article has been sent to your inbox successfully.
We never share your data
Exchange Server name instead of User in reports
KB1891 | Last review: Mar 27, 2014 | Netwrix Auditor for Exchange, Netwrix Auditor for Active Directory | 5.0 and above
|Symptoms||Netwrix Auditor report shows Exchange server name instead of user name in the Who changed column for group membership changes:
|Cause||This happens because the default Exchange 2013 Administrator Audit Log parameter LogLevel is set to None, and the
But the data required to show correct Who changed is missing because
|Resolution||In order to solve this issue, the LogLevel parameter should be changed from None to Verbose to provide
Set-AdminAuditLogConfig -LogLevel Verbose
The output should be like this:
[PS] C:\Windows\system32>Set-AdminAuditLogConfig -LogLevel Verbose
WARNING: The admin audit log configuration change you specified could take up to 60 minutes to take effect.
After that please run the Get-AdminAuditLogConfig cmdlet and check that LogLevel is set to verbose now:
LogLevel : Verbose
Was this information helpful?