Exchange Issues Event: 566

Event ID 566 – Mailbox permissions

Event ID 566:

This Exchange event goes hand-in-hand with event ID 565 that logs the permissions requested by a user while accessing an Active Directory object. Event ID 566 logs all the permissions actually used by the user while accessing the object. Even though the object can be accessed several times and several permissions can be used, event ID 566 occurs only when a particular permission is used for the first time. Exchange Reporter Plus helps you track all permission changes made in your Exchange environment.

About Exchange Reporter Plus:

Exchange Reporter Plus is a reporting, monitoring and change auditing tool for Exchange servers, Exchange Online and Skype for Business servers. This tool offers simple and easy-to-analyse permissions changes reports. You can track the changes made by viewing the previous and the current values of permission-related attributes. The report also gives a record of the name of the user, time of modification, server, domain details and more.

Steps to generate mailbox permissions reports:

1. Go to the Audit tab on the top pane.
2. Navigate to Exchange Server > Advance Audit > Admin Audit Log.
3. Click on the Mailbox Permission Changes report.
4. Enter the period for report generation.
5. Select the type of view for the report (Summary, Default, or Custom View).

Why Exchange Reporter Plus:

• Schedule reports to get regular updates about various Exchange objects.
• Export reports in any of the 4 formats: HTML, CSV, PDF and XLS.
• Add or remove columns from the report and customize them as and when you require.
• Use the advanced filter options to generate and scrutinise the reports further.
• Customise alert profiles to get immediate SMS or email notifications.
• Add new actions that you want to audit apart from the pre-defined ones.