Forum Discussion

RWRWRW's avatar
RWRWRW
Copper Contributor
Feb 04, 2019

You have 0 mailboxes that are being audited.

If I run Get-Mailbox -ResultSize Unlimited -Filter {RecipientTypeDetails -eq "UserMailbox"} | FL Name,Audit* from PowerShell, I get a report back that AuditEnabled is True for all mailboxes.  And yet, y securescore comes back and says "You have 0 mailboxes that are being audited." Why is this giving an inaccurate report?  

4 Replies

  • For me it displays the correct number. If you have made changes to the auditing properties recently, give Secure score some time to update. You might also want to check for any Bypass configured via Get-MailboxAuditBypassAssociation.

    • RWRWRW's avatar
      RWRWRW
      Copper Contributor

      Hi Vasil

       

      do you have any other thoughts?

       

      thank you

      Ron

      • Nope, sorry. I was hoping one of the Microsoft folks out here might look into this and give a better answer.

    • RWRWRW's avatar
      RWRWRW
      Copper Contributor

      Thank you for replying.  No changes have been made recently - for each and every mailbox, the "AuditEnabled" attribute is "True".  I ran the AuditBypass command and it is false across the board.