Forum Discussion
Audit events on a mailbox
Looking for audit data for an adminstrator/enduser driven Set-Mailbox -ForwardingSmtpAddress /ForwardingAddress cmd actions.. Is this something that can be tracked without mbx auditing turned on?...
If the user has set the forwarding himself, it will not be visible in the audit logs (it doesnt use the cmdlet). If someone with admin access has configured the forwarding, it should be visible, even with mailbox-level auditing disabled.