Forum Discussion
How to disable Office 365 mailbox audit
I have one Exchange office 365 email which is set as an Administrator.
I move an email from one folder to another in outlook and the activity is logged after 5 minutes
I now stop the audit
Set-Mailbox -Identity "my alias" -AuditEnabled $false
But the audits keep on coming, I also cannot remove the audits by setting the audit time limit
Set-Mailbox -Identity "my alias" -AuditLogAgeLimit 00:00:00
I am using the Audit log search tool in the security and compliance area.
Does it still show as Enabled? You can always open a support case to get this investigated.
7 Replies
- C_the_SBronze Contributor
Also, how long did you wait after you turned it off? Sometimes turning something off (or on) in Office365 can take hours to take affect.
- Peter FarrerCopper ContributorYes waited all night and more on one occasion. Thanks.
Does it still show as Enabled? You can always open a support case to get this investigated.
- Peter FarrerCopper ContributorSupport resynched something. Tested OK, but need to wait 24hours to make sure.
Support excellent by the way.
ThanksThe problem could be that the change you made to the mailbox properties did not replicate to the domain controllers serving the server that hosted the active copy of the mailbox for a little time. That's the reason why (even on-premises) you often see warnings that a change might not be effective for up to 60 minutes... But there are other complicating factors as well, all of which you can and should expect inside an infrastructrure as massive and as complex as Office 365.
- Peter FarrerCopper Contributor
Hi Vasil, Shows disabled.