After AD is configured to audit, configure the objects you want to audit in Exchange by editing properties in ESM.
You can log the SMTP, NNTP, and HTTP virtual servers. You must configure the HTTP virtual server logging in the IIS console.