Message Read Status Reporting

%3CLINGO-SUB%20id%3D%22lingo-sub-2592904%22%20slang%3D%22en-US%22%3EMessage%20Read%20Status%20Reporting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2592904%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20Team%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20any%20one%20here%20know%20if%20there%20is%20a%20canned%20script%20that%20will%20report%20on%20whether%20or%20not%20a%20user%20has%20read%20a%20message%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20realize%20message%20tracking%20can%20be%20used%20to%20report%20if%20a%20message%20was%20delivered%2C%20or%20mailbox%20auditing%20reports%20can%20be%20used%20to%20track%20what%20a%20user%20has%20done%20with%20a%20message%20(except%20for%20owner%20reads).%20I%20also%20understand%20there%20are%20on-prem%20cmdlets%20that%20can%20be%20used%20to%20report%20the%20same.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20know%20you%20can%20use%20Search-Mailbox%20which%20is%20what%20i%20have%20used%20in%20the%20past%20but%20I%20was%20hoping%20for%20something%20that%20hasn't%20been%20deprecated.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20found%20this%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fpractical365.com%2Ftracking-read-email-messages-exchange-server%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fpractical365.com%2Ftracking-read-email-messages-exchange-server%2F%3C%2FA%3E%26nbsp%3Bdoesnt%20work%20for%20exchange%20online.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%3A%26nbsp%3B%3CA%20href%3D%22http%3A%2F%2Fwww.lab365.in%2F2017%2F02%2Fmonitoring-email-read-status-using-ews.html%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.lab365.in%2F2017%2F02%2Fmonitoring-email-read-status-using-ews.html%3C%2FA%3E%26nbsp%3B-%20does%20work%20but%20is%20well%20beyond%20my%20skillset%20as%20far%20as%20powershell%20%2F%20ews%20are%20concerned.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%20what%20we%20are%20in%20need%20of%20is%20a%20way%20to%20report%20whether%20or%20not%20a%20user%20or%20list%20of%20users%20(provided%20via%20input%20file)%20have%20read%20messages%20in%20their%20inbox.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERobert%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2592904%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHybrid%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

Hey Team, 

 

Does any one here know if there is a canned script that will report on whether or not a user has read a message? 

 

I realize message tracking can be used to report if a message was delivered, or mailbox auditing reports can be used to track what a user has done with a message (except for owner reads). I also understand there are on-prem cmdlets that can be used to report the same. 

 

I know you can use Search-Mailbox which is what i have used in the past but I was hoping for something that hasn't been deprecated. 

 

I found this: https://practical365.com/tracking-read-email-messages-exchange-server/ doesnt work for exchange online. 

 

This: http://www.lab365.in/2017/02/monitoring-email-read-status-using-ews.html - does work but is well beyond my skillset as far as powershell / ews are concerned. 

 

However what we are in need of is a way to report whether or not a user or list of users (provided via input file) have read messages in their inbox.  

 

Thanks, 

 

Robert 

2 Replies
All those methods give you the *current* status of the message, I can very well read it, mark it unread and pretend I never opened it. So if your goal is to check whether a given message has been read/interacted with, you can use url tracking and such, all those good old marketing (spammer) tricks :)
Another option would be to use the MailItemsAccessed event, but those require advanced auditing and are generally too noisy: https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwide#mailite...
Thanks for your help on this. It looks like that may work, previously I did look at the unified audit logs, but every time I checked for any mail events the results always came back blank. I now realize that we need E5s or An addon for Every user we want to monitor.