Forum Discussion
Kin Mun Yeow
Oct 21, 2018Copper Contributor
emails missing
emails went to missing from folders. upon further checking, found that the emails went to deleted folders. i have to do recovery. i did the recovery of emails 3 times as i find that my emails went m...
VasilMichev
Oct 22, 2018MVP
Enable auditing on the mailbox, if you haven't done so already, then review the audit logs to find out who performed this action: https://docs.microsoft.com/en-us/office365/securitycompliance/enable-mailbox-auditing
- Kin Mun YeowOct 22, 2018Copper Contributorhave found the audit logs. found nothing except logins.
nothing that mentioned mails being moved/deleted- Kin Mun YeowOct 22, 2018Copper Contributor
only managed to find this.
delete message from deleted folder
- VasilMichevOct 22, 2018MVP
Auditing will not include any past events, only events from the date you turned it on forward. In addition, by default only certain types of activities are audited, so make sure you follow the instructions in the article I linked to adjust the parameters accordingly.
- Kin Mun YeowOct 22, 2018Copper Contributori have already turn on auditing.
what commands should i used to check- Oct 22, 2018
Please refer to:
Also you can check the audit log search in security and compliance center!
adam