Skip to content
Tech Shizz Logo

An Engineers Blog

  • TechShizz
  • blog

Office 365: Audit and tracking (Power Shell)

Posted on February 23, 2021 By rich No Comments on Office 365: Audit and tracking (Power Shell)
Enable Auditing for a specific Mailbox

Set-Mailbox [email protected] -AuditEnabled $true

Enable mailbox auditing for all users

$UserMailboxes = Get-Mailbox -Filter {(RecipientTypeDetails -eq 'UserMailbox')}
$UserMailboxes | ForEach {Set-Mailbox $_.Identity -AuditEnabled $true

View Configuration Settings for current administrator audit logging

Get-AdminAuditLogConfig

Add comments to administrator log

Write-AdminAuditLog

Search content of administrator audit log

Search-AdminAuditLog OR New-AdminAuditLogSearch

For a simplified view

Search-AdminAuditLog | fl Caller,RunDate,ObjectModified,CmdletName

View Accounts the bypass mailbox audit logging
Get-MailboxAuditBypassAssociation

Specify accounts that bypass mailbox audit logging
Set-MailboxAuditBypassAssociation
Get data from a specific message tracking report

Get-MessageTrackingReport

Find a unique message tracking report using search criteria provided

Search-MessageTrackingReport

View information about open logon session to specified mailbox

Get-LogonStatistics  < Cmdlet has been depricated

View information about the folders in a specific mailbox

Get-MailboxFolderStatistics

View information about a specified Mailbox

Get-MailboxStatistics

View information about the total number of recipients in the organization

Get-RecipientStatisticsReport

Post navigation

❮ Previous Post: Allow Domain Users to install their own printers
Next Post: Office 365: Configuring Malware Filters ❯

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Generic selectors
Exact matches only
Search in title
Search in content
Post Type Selectors

Subscribe to our newsletter!

Recent Posts

  • How to implement a lightning-fast ransomware playbook
  • How to achieve defence in depth in your business
  • How to implement a SecOps team phishing response plan
  • How to block an Office 365 Sign-in correctly
  • Microsoft finally patched serious Exchange 0-day over a month old!

Recent Comments

    Archives

    • November 2022
    • July 2021
    • March 2021
    • February 2021

    Categories

    • Cyber Security
    • Uncategorized

    Meta

    • Log in
    • Entries feed
    • Comments feed
    • WordPress.org

    Copyright © 2023 .

    Theme: Oceanly News Dark by ScriptsTown