Forum Discussion

Iron Contributor

Jan 05, 2018

IMAP and POP verbose logging

Are there commands in Exchange management powershell to list IMAP and POP activities - for example if emails were downloaded, synchronized from a user account? Thanks.

exchange online

Dominik Hoefling

MVP

Jan 06, 2018

AFAIK no.

There are 3 things I would consider:

1. Determining how users are accessing their mailboxes in Office 365: https://www.cogmotive.com/blog/office-365-tips/determining-how-users-are-accessing-their-mailboxes-in-office-365

2. You could enable Outlook logging and collect the log files i.e. on a file share.

3. Enable mailbox audit logging for those mailboxes and check if the log contains some information about IMAP and POP access and maybe activities.

EmyLoanzon

Iron Contributor

Jan 08, 2018

Thanks for outlining the options, Dominik Hoefling! Other than enabling verbose logging in Outlook (which slows Outlook), I have done the other 2, but have not gotten the information on IMAP detailed events logging. I saw that the account connected via IMAP, but I did not see if the Inbox folder was downloaded, or emails were synced.

Thanks again!