What's the best way to confirm to an auditor that a change made to any permission in Exchange was actually made by a legitimate admin with an approved change ticket?
We were recently asked to implement Manage Engine's "Exchange Reporter Plus" and to set it up so that it notifies the whole team of any change to permissions on any account. The person responsible for making that change is then supposed to respond to the email to say why the change was made and what the ticket number was. That will satisfy the auditors, they say.
But that is a REALLY laborious process to dig up a ticket number and email it out to the team for every single change. Surely other companies have this requirement and have come up with better solutions, right?
It seems related to “ManageEngine Exchange Reporter Plus” application.
Please check if there is any related build-in report to do this. https://www.manageengine.com/products/exchange-reports/help/index.html
If it needs custom report, I think it is better to work with the vendor.