Email Forwarding

Copper Contributor

Hi There, 

 

Is there any way to check, who enabled email forwarding for a user in M365 EXO

Thanks

2 Replies
You could possibly find all set-mailbox actions by using the below powershell command

Search-UnifiedAuditLog -Operations Set-Mailbox -StartDate 01-Jul-2023 -EndDate 09-Jul-2023 -Formatted -ResultSize 1000 | ft creationdate, userids, operations

or visit Microsoft Purview (https://compliance.microsoft.com/) a do a search under Audit.