HNGlance

Top Best New Show

Exchange Online Mailbox Audit Logs "On" might not mean "On"

https://twitter.com/itguysocal/status/2001383890574020648

by fowl2 • 7 months ago

1 1 7 months ago

TW

Related Stories

Loading related stories...

Comments

1

fowl2• 7 months ago

When you run Get-Mailbox -Identity <MailboxIdentity> | Format-List AuditEnabled, the AuditEnabled property always displays as True. This hardcoded display value doesn't reflect the actual mailbox-level audit configuration.
To verify the actual mailbox audit status, use the Filter parameter in the following command: PowerShell
Get-Mailbox -Identity <MailboxIdentity> -Filter "AuditEnabled -eq 'True'"| Format-List
If the command returns the mailbox object, mailbox-level auditing is enabled. If the command returns an error stating the object couldn't be found, mailbox-level auditing is disabled.

https://learn.microsoft.com/en-us/purview/audit-mailboxes?so...

Source preview

twitter.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms