The server name appears in the who field instead of the user
说明
Customer adds a user to the BTGM group from the exchange console and removes the same user from the AD console. In ChangeAuditor logs, the adder appears as "server", while the user who removes it appears as "user". In ChangeAuditor, they want to access the user who made the transaction instead of the server name.
解决办法
When you perform the change on AD the event generated identifies the user that actually did the change.
When you do the change on Exchange it is not the user that is logged in into the exchange that is registered as doing the change but the exchange itself. so what you see is just that the change was originated by exchange server, no details on the user because exchange doesn't parse that information so we have no way to know who did it!
