Forum Discussion
Shared Mailbox audit
Hello,
I am having trouble auditing a shared mailbox. I have enabled auditing on a shared mailbox. When viewing the audit logs via the Compliance Manager the only audited event I have are from a u...
Have you checked the actual mailbox audit logs, the ones stored in the mailbox not the SCC console? In other words, run this:
Search-MailboxAuditLog -Identity shared -ShowDetails -LogonTypes Delegate
Thanks for sharing. I thought all the audit logs are available in SCC!.
In theory, yes. In practice... not as reliable as you might think. Did you find the events in the mailbox log?