Forum Discussion

Copper Contributor

Jul 12, 2017

Can't disable S&C alerts.

Hello, I was learning about O365 alerts and just to test it a bit, I have created an alert that would notify me whenever I accessed a document in our company's tenant. Well it worked as expected ...

microsoft 365

security

Jan Duchač

Copper Contributor

Jul 13, 2017

Hi,

thanks for fast reply. I actually never used powershell so this was a new thing for me. Once I installed PS for O365 I tried to run the Get-ActivityAlert but I have got an error that the command is not recognized. So i tried "Get-Command *Alert" if there are some commands with alert in name and it didnt find anything. Do I have to install some extension or what am I doing wrong?

Thanks

Jan Duchač

Cian Allner

Silver Contributor

Jul 13, 2017

If you follow the instructions here it should work:

https://technet.microsoft.com/en-us/library/mt587092(v=exchg.160).aspx

Set-ExecutionPolicy RemoteSigned
$UserCredential = Get-Credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.compliance.protection.outlook.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection
Import-PSSession $Session

I tried the above code in a PowerShell (admin) console and the Get-ActivityAlert command worked ok. You may find the command doesn't return anything if it can't find any active alerts but it's worth a try.

Per that article, if not a global admin, there are additional steps here, that an admin can grant - https://support.office.com/en-us/article/Give-users-access-to-the-Office-365-Security-Compliance-Center-2cfce2c8-20c5-47f9-afc4-24b059c1bd76.

Jan Duchač
Copper Contributor
Jul 13, 2017
Thanks a lot, exactly what I needed :-) I can now run the Get-ActivityAlert command. Problem is, that it only lists one alert (which is active alert in S&C) and it doesnt list the alerts I have a problem with. Guess I have to contact Microsoft support directly, since the alert emails are getting annoying and there seems to be no way to disable them.

Thanks a lot once again.

Have a nice day
Jan Duchač
- Cian Allner
  Silver Contributor
  Jul 13, 2017
  It was probably a long shot but worth doing, good luck with Office 365 support, hope they can resolve this for you.
  
  Edit - Jan Duchač If you get an answer to this from the service request and you have the time, please come back with what the resolution was, as it may help others who have the same issue, thanks!
  - Jan Duchač
    Copper Contributor
    Jul 13, 2017
    I sure will let let you know once I get it solved. I have submitted a support ticket, so hopefuly I will know the answer soon :-)