Generating Alerts for mailbox access

New Contributor

I need to have an alert sent when specific users (Admins) open any user maiboxes. This isn't an event selectable in the Security and Compliance center GUI, but I have been able to create an alert for this via powershell and the New-ActivityAlert cmdlet specifying the 'folderbind' operation. This successfully sends the alert by email when an admin opens a mailbox; however the email only lists the Activity performed and who performed it. Is there a way to include the user mailbox that was accessed? 

 

Many thanks.

1 Reply

You cannot customize the info presented in the email alerts. To get any additional details, you will have to resort back to the Audit logs. You should also be able to export those via PowerShell, but in my experience the API is still a bit unreliable...