Forum Discussion

Peter Farrer's avatar
Peter Farrer
Copper Contributor
Aug 23, 2017
Solved

How to disable Office 365 mailbox audit

I have one Exchange office 365 email which is set as an Administrator.

I move an email from one folder to another in outlook and the activity is logged after 5 minutes

 

I now stop the audit

Set-Mailbox -Identity "my alias" -AuditEnabled $false

 But the audits keep on coming, I also cannot remove the audits by setting the audit time limit

 

Set-Mailbox -Identity "my alias" -AuditLogAgeLimit 00:00:00

 

I am using the Audit log search tool in the security and compliance area.

 

  • Does it still show as Enabled? You can always open a support case to get this investigated.

7 Replies

  • C_the_S's avatar
    C_the_S
    Bronze Contributor

    Also, how long did you wait after you turned it off? Sometimes turning something off (or on) in Office365 can take hours to take affect.

     

  • Does it still show as Enabled? You can always open a support case to get this investigated.

    • Peter Farrer's avatar
      Peter Farrer
      Copper Contributor
      Support resynched something. Tested OK, but need to wait 24hours to make sure.

      Support excellent by the way.

      Thanks
      • TonyRedmond's avatar
        TonyRedmond
        MVP

        The problem could be that the change you made to the mailbox properties did not replicate to the domain controllers serving the server that hosted the active copy of the mailbox for a little time. That's the reason why (even on-premises) you often see warnings that a change might not be effective for up to 60 minutes... But there are other complicating factors as well, all of which you can and should expect inside an infrastructrure as massive and as complex as Office 365.

Resources