Forum Discussion
Solved
Audit for Message Trace and Exchange managment shell commands
Is there a way to run audits on which admin users ran message trace and Exchange online power shell commands (and what commands those are)? Thank you.
Message trace is not audited, neither are any of the Get-* cmdlets. All the others are audited and you can view them in the Unified audit log or the Exchange Admin Center: https://docs.microsoft.com/en-us/exchange/security-and-compliance/exchange-auditing-reports/view-administrator-audit-log
Message trace is not audited, neither are any of the Get-* cmdlets. All the others are audited and you can view them in the Unified audit log or the Exchange Admin Center: https://docs.microsoft.com/en-us/exchange/security-and-compliance/exchange-auditing-reports/view-administrator-audit-log