Review changes made by adminstrators to the Exchange configuration
http://technet.microsoft.com/en-us/library/dd298169.aspx Use the Set-AdminAuditLogConfig cmdlet to configure the administrator audit logging configuration settings. This also shows which administrators performed each change.