[求助]安装的exchange2010能不能查到用户的登录记录 [复制链接]

一个用户反馈说被别人知道密码后发出邮件

系统能否查到发出邮件记录？比如操作的计算机名，ip，MAC等？

系统有这些功能没？

找到这封邮件看邮件头就知道了

我认为不能，Header里面只会告诉你这封邮件的访问的路由信息及其IP地址，但不会有发送邮件这台client的地址。

如果是账号泄露，可以检查有哪些邮件被冒名发了出来。然后赶紧修改密码。

可以看到发件人的邮件服务器地址

Received: from smtp2192-212.mail.aliyun.com (unknown [121.197.192.212])
    by bizmx4.qq.com (NewMx) with SMTP id
    for <support@exchangecn.com>; Mon, 18 Jan 2016 08:55:24 +0800
X-QQ-FEAT: N4pdkPNmNYcF151oza9igP8mcXM1l9nw/cgAST13RMY=
X-QQ-MAILINFO: MhnJM8dXNV2ZHG47Q7zsqZjKu+JfxsP+Ca7EtB4MbVlDEX/aTKCajjqkD
    qapo7kgvyrSHgyLMJy+QA9uJ4PSGbmRzy3pcB3crvZgCuVqzdZ14lXOkaBa66lf0Uhd4iRK
    Om2ByPDu/hyiUkbYkuKguTk=
X-QQ-mid: bizmx4t1453078525tleubcfsm
X-QQ-ORGSender: lj@anti-spam.cn
X-Alimail-AntiSpam:AC=PASS;BC=-1|-1;BR=01201311R121e2;FP=0|-1|-1|-1|0|-1|-1|-1;HT=e01l10436;MF=lj@anti-spam.cn;NM=1;PH=DS;RN=1;RT=1;SR=0;TI=SMTPD_----4SfDudu_1453078523;
Received: from 2013-1216-1804(mailfrom:lj@anti-spam.cn ip:124.205.195.58)
          by smtp.aliyun-inc.com(10.147.40.200);
          Mon, 18 Jan 2016 08:55:24 +0800
Date: Mon, 18 Jan 2016 08:55:31 +0800
From: "lj@anti-spam.cn" <lj@anti-spam.cn>
To: "Johnnie Li" <support@exchangecn.com>
Subject: =?GB2312?B?u9i4tDogQVBJyerH6w==?=
References: <000201d14b44$fea76e60$fbf64b20$@exchangecn.com>
X-Priority: 3
X-Has-Attach: no
X-Mailer: Foxmail 7, 2, 7, 26[cn]
Mime-Version: 1.0
Message-ID: <201601180855306536563@anti-spam.cn>
Content-Type: multipart/related;
    boundary="----=_001_NextPart255782145124_=----"