Forum Discussion

AndrewX's avatar
AndrewX
Iron Contributor
May 22, 2018

Search-MailboxAuditLog export email operations

Hello, is it possible to track through audit logs or other, the export|download of a mailbox to pst or some format for offline reading?

Eg does turning on OWA offline mode, or export pst using Powershell trigger an audit event?

I think Powershell is logged.

I guess I could perform this on my own mailbox to test, but any solid advice or knowledge would help here.
  • Export via PST is an admin-level functionality, so it's audited by default. Using the offline mode in clients is not audited afaik.

  • Export via PST is an admin-level functionality, so it's audited by default. Using the offline mode in clients is not audited afaik.

Resources