Email Forwarding

Copper Contributor

Hi There, 


Is there any way to check, who enabled email forwarding for a user in M365 EXO


2 Replies
You could possibly find all set-mailbox actions by using the below powershell command

Search-UnifiedAuditLog -Operations Set-Mailbox -StartDate 01-Jul-2023 -EndDate 09-Jul-2023 -Formatted -ResultSize 1000 | ft creationdate, userids, operations

or visit Microsoft Purview ( a do a search under Audit.