SOLVED

Audit for Message Trace and Exchange managment shell commands

Iron Contributor

 

Is there a way to run audits on which admin users ran message trace and Exchange online power shell commands (and what commands those are)?

 

Thank you.

1 Reply
best response confirmed by Emy Loanzon (Iron Contributor)
Solution

Message trace is not audited, neither are any of the Get-* cmdlets. All the others are audited and you can view them in the Unified audit log or the Exchange Admin Center: https://docs.microsoft.com/en-us/exchange/security-and-compliance/exchange-auditing-reports/view-adm...

1 best response

Accepted Solutions
best response confirmed by Emy Loanzon (Iron Contributor)
Solution

Message trace is not audited, neither are any of the Get-* cmdlets. All the others are audited and you can view them in the Unified audit log or the Exchange Admin Center: https://docs.microsoft.com/en-us/exchange/security-and-compliance/exchange-auditing-reports/view-adm...

View solution in original post