Forum Discussion
Enabling Mailbox Audit by Default
Hi,
Apart from the methods of manually/scheduled/script enabling auditing on new mailboxes, has the "Set-MailboxPlan" or any other Default/Automated methods become available yet?
- VasilMichevFeb 07, 2018MVP
Nope.
- brian grantFeb 06, 2019Copper Contributor
it is applied by Default now.
- AndrewXFeb 06, 2019Iron ContributorYep finally, great new feature :)
- Joshua BinesAug 10, 2020Iron Contributor
Yes you would think that all mailboxes would be enabled with that setting but guess what? turns out they are not! Important to note: some types of mailboxes are missing which could be used as an attack vector.
And... log shipping to the O365 unified log is also missing without that setting.
https://office365itpros.com/2020/03/12/exchange-online-mailbox-auditing-default-problem/
It's crazy stuff... when I first looked at this i thought just enable that and move on until I had a security assessment which still recommended enabling the setting on all mailbox in the tenant.