Forum Discussion
Get Outlook versions
You can check the Activity logs in the SCC (https://protection.office.com/#/unifiedauditlog). For example, filter by "Created or received message" then export the logs to CSV, the client information will be visible there.
Thanks Vasil. I'll look at that again then. I didn't have it enabled on the respective tenant but it is now!
On another tenant I looked and there were no useful entries. I wonder why??
Ahh needs turned on for all individual mailboxes? Yeh? https://support.office.com/en-gb/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c?ui=en-US&rs=en-GB&ad=GB
Yup, you need auditing enabled on each mailbox for the events to be gathered. Otherwise you can rely on the Logon events, but in my experience they're not that reliable client version-wise.
Another option is to try Get-ConnectionByClientTypeReport, though it only lists the protocol (OWA/EWS/EAS/etc).
If you are running AD FS, you can also get the client info from the event logs.
Thanks Vasil. I turned on the auditing last night and will see what today's logging brings.
Yup, had tried that. But not even client name (never mind version) AFAICS.
