Hi,
I am looking for a way to audit Mapi connections to an On-Prem Exchange server using ADFS/MFA.
I can find logs for OWA and ActiveSync connections. I can find information on who is using "delegated authority" to connect to a mailbox, but I'm specifically looking for information on who is connecting to the Exchange Server via Outlook via Mapi/Bearer, or even more specifically failures to connect, along with all relevant information. i.e. IP address, Account, reason of failure etc.
Can anyone recommend anything?
Thanks
