IMAP and POP verbose logging

[Emy Loanzon]

Are there commands in Exchange management powershell to list IMAP and POP activities  - for example if emails were downloaded, synchronized from a user account?

Thanks.

[#2]

AFAIK no.

There are 3 things I would consider:

1. Determining how users are accessing their mailboxes in Office 365: https://www.cogmotive.com/blog/office-365-tips/determining-how-users-are-accessing-their-mailboxes-i...

2. You could enable Outlook logging and collect the log files i.e. on a file share.

3. Enable mailbox audit logging for those mailboxes and check if the log contains some information about IMAP and POP access and maybe activities.

[#3]

Thanks for outlining the options, @Dominik Hoefling! Other than enabling verbose logging in Outlook (which slows Outlook), I have done the other 2, but have not gotten the information on IMAP detailed events logging. I saw that the account connected via IMAP, but I did not see if the Inbox folder was downloaded, or emails were synced.

Thanks again!

[#4]

@Emy Loanzon Just checking if you ever found a way to determine if Inbox folder was downloaded, or emails were synced?

I have same challenge and cant find an options.

[#5]

@lfkentwell Sorry for the late response.

No, I was not able to figure out the POP/IMAP activities in a mailbox. When I was investigating this,  logging POP/IMAP activities was available for on premise Exchange servers, not with Exchange Online.

[#6]

@Emy Loanzon this was pretty much my conclusion also.  Later confirmed by Microsoft premier support.