Steps to monitor OWA user logon attempts in Exchange

Outlook web access (OWA) is a web-based email client application that is compatible with the widely used Exchange Server and Exchange Online platforms. Most of the businesses today use Exchange and OWA to manage their email communications. It is wise to keep track of all OWA user activities and monitor logons closely.

Exchange Reporter Plus offers exclusive reports to track OWA user logons based on department, browser, client IP and logon failures (which might be an indicator of malicious attacks). Besides reporting, you can also audit and monitor Exchange user logons and other activities (owner activities, non-owner and delegate activities).

Steps to track OWA user logon attempts using Exchange Reporter Plus:

Notes: Make sure to add a schedule to gather OWA user logs in the Settings tab before generating user logon reports.

1. Go to the Reports tab on the top pane.
2. Navigate to Exchange Server > OWA & Active Sync > OWA General Reports.

   Note: Navigate to Exchange Online > OWA & Mobile Reports to get OWA user logon report for Exchange Online.

3. Choose a report from the list of available reports.
4. a. For Exchange Server: Select the Exchange Server organization and choose the period for which you want to generate the report.

   b. For Exchange Online: Select the Exchange Online tenant and domain filters. Click on Generate now.

Find the complete list of user logon reports available for Exchange Server and Exchange Online in this page. You can export these reports to CSV, PDF, HTML and XLS formats.