Forum Discussion
Parker0105
Jul 19, 2024Copper Contributor
Issue with search mailbox audit log on Exchange Online
Hi Exchange experts I have an issue with searching the audit logs with the mailboxes on Exchange Online. I have a mailbox on Exchange Online. The properties of that mailbox are as follows AuditEn...
- Jul 23, 2024If you have made those changes as an admin, you will have to search the Admin audit log, not the mailbox one. For example:
Search-AdminAuditLog -StartDate (Get-Date).AddDays(-30) -EndDate (Get-Date).AddDays(1) -Cmdlets Add-MailboxPermission
You can also use -ObjectId to designate the mailbox/recipient against who the cmdlets were executed, or -UserId for the user who run them,
Parker0105
Jul 23, 2024Copper Contributor
Thanks bro, I have tried but till have no logs for change permission on the mailbox activity
VasilMichev
Jul 23, 2024MVP
If you have made those changes as an admin, you will have to search the Admin audit log, not the mailbox one. For example:
Search-AdminAuditLog -StartDate (Get-Date).AddDays(-30) -EndDate (Get-Date).AddDays(1) -Cmdlets Add-MailboxPermission
You can also use -ObjectId to designate the mailbox/recipient against who the cmdlets were executed, or -UserId for the user who run them,
Search-AdminAuditLog -StartDate (Get-Date).AddDays(-30) -EndDate (Get-Date).AddDays(1) -Cmdlets Add-MailboxPermission
You can also use -ObjectId to designate the mailbox/recipient against who the cmdlets were executed, or -UserId for the user who run them,
- Parker0105Jul 23, 2024Copper ContributorHi Vasil
Yes, I made some changes to user mailboxes in the Exchange Admin Center using one of my administrative accounts. Can I use the Security Portal to check which administrators have changed mailbox permissions?- VasilMichevJul 23, 2024MVPYes, you can use the Audit. functionality therein.
- Parker0105Jul 24, 2024Copper ContributorThank you for your instructions