Forum Discussion
Jessie_Hernandez
Mar 06, 2017Brass Contributor
Enabling Mailbox Audit by Default
Is there a way of turning on mailbox auditing by default in Exchange Online for newly created mailboxes? It appears that this would be feasable via the "Set-mailboxplan" cmdlet but the actual parame...
brian grant
Copper Contributor
it is applied by Default now.
AndrewX
Feb 06, 2019Iron Contributor
Yep finally, great new feature :)
- Joshua BinesAug 10, 2020Iron Contributor
Yes you would think that all mailboxes would be enabled with that setting but guess what? turns out they are not! Important to note: some types of mailboxes are missing which could be used as an attack vector.
And... log shipping to the O365 unified log is also missing without that setting.
https://office365itpros.com/2020/03/12/exchange-online-mailbox-auditing-default-problem/
It's crazy stuff... when I first looked at this i thought just enable that and move on until I had a security assessment which still recommended enabling the setting on all mailbox in the tenant.