Forum Discussion
Solved
Issue with search mailbox audit log on Exchange Online
Hi Exchange experts I have an issue with searching the audit logs with the mailboxes on Exchange Online. I have a mailbox on Exchange Online. The properties of that mailbox are as follows AuditEn...
- If you have made those changes as an admin, you will have to search the Admin audit log, not the mailbox one. For example:
Search-AdminAuditLog -StartDate (Get-Date).AddDays(-30) -EndDate (Get-Date).AddDays(1) -Cmdlets Add-MailboxPermission
You can also use -ObjectId to designate the mailbox/recipient against who the cmdlets were executed, or -UserId for the user who run them,
Add the -ShowDetails parameter if you want to review the entries via PowerShell. Also, try using "neutral" date format, such as "17 Jul 2024".
Thanks bro, I have tried but till have no logs for change permission on the mailbox activity
- If you have made those changes as an admin, you will have to search the Admin audit log, not the mailbox one. For example:
Search-AdminAuditLog -StartDate (Get-Date).AddDays(-30) -EndDate (Get-Date).AddDays(1) -Cmdlets Add-MailboxPermission
You can also use -ObjectId to designate the mailbox/recipient against who the cmdlets were executed, or -UserId for the user who run them,- Hi Vasil
Yes, I made some changes to user mailboxes in the Exchange Admin Center using one of my administrative accounts. Can I use the Security Portal to check which administrators have changed mailbox permissions?- Yes, you can use the Audit. functionality therein.