Audit login times

[Mouseclone]

I'm trying to figure out what time a user checks their email. I'm trying to track down a problem with their email being read already when they open their out look. It is almost as if another deveice is checking it and marking the items are read.

I just need to know where I can find the logs for access times. ie joe logged in at this time and logged out at this time and from what IP address.

[Valerion]

Enable auditing on the interfaces (Remote and Local Client, IMAP, POP3). omconfaud and omshowaud is your friends here.

[Mouseclone]

many many thanks. I have it up and running now. Now to figure out is a device is causing messages to be red or not.