Hi people, BrandonKoeller
Up until now i have custom actions set on my org mailboxes, and this was set each day on a recurring schedule.
Now with auditing by default enabled i have a bunch of questions;
- Is it safe to Set-Mailbox -AuditEnabled $false on all mailboxes (because it will instead be enabled at the tenant level?
- Does the auditing by default interfere with my existing custom actions?
- Is it safe to Set-Mailbox -AuditOwner $null -AuditDelegate $null -AuditAdmin $null on all mailboxes and let the default actions take over?
- If i want all the default actions + AuditOwner Copy, do i need to simply Set-Mailbox -AuditOwner @{Add="Copy"} for all mailboxes or do i need to explicitly add all actions that i want audited?
- For a mailbox with default actions currently set, eg. brand new mailbox, with tenant level auditing enabled, will Set-Mailbox -AuditOwner @{Add="Copy"} append to the list of actions or will it overwrite and treat this as the only action?
PS: This could be the same as the question above, depending how you read/interpret it.
## UPDATE
I have got more info through my own testing and below i have updated and answered some of my questions above.
- Is it safe to Set-Mailbox -AuditEnabled $false on all mailboxes (because it will instead be enabled at the tenant level?
- NO, if you Set-Mailbox -AuditEnabled $false you will DISABLE auditing. MS default auditing only works on mailboxes that have auditing enabled.
- Does the auditing by default interfere with my existing custom actions?
- Is it safe to Set-Mailbox -AuditOwner $null -AuditDelegate $null -AuditAdmin $null on all mailboxes and let the default actions take over?
- NO, this will overwrite and turn off the default actions set my MS.
- If i want all the default actions + AuditOwner Copy, do i need to simply Set-Mailbox -AuditOwner @{Add="Copy"} for all mailboxes or do i need to explicitly add all actions that i want audited?
- Yeah, either "@{Add}" or simply set all the actions you want.