Powershell Code to Check Who Changed Appointment Status

%3CLINGO-SUB%20id%3D%22lingo-sub-293178%22%20slang%3D%22en-US%22%3EPowershell%20Code%20to%20Check%20Who%20Changed%20Appointment%20Status%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-293178%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%3C%2FP%3E%3CP%3EThis%20is%20my%20first%20post%20in%20the%20blog.%20I%20need%20some%20help%20please.%20We%20have%20an%20executive%20user%20who%20share%20his%20calendar%20with%202%20of%20his%20Assistants.%20Appointment%20at%20his%20calendar%20changed%20to%20Tentative%20this%20morning%2C%20as%20per%20the%20user%20he%20never%20changed%20it%20and%20as%20per%26nbsp%3BAssistants%20they%20neither.%20Now%20i%20am%20trying%20to%20find%20out%20from%20Calendar%20log%20using%20powershell%20if%20i%20can%20find%20who%20changed%20the%20appointment%20last%20time.%20Using%26nbsp%3BGet-CalendarDiagnosticLog%20i%20am%20able%20to%20find%20the%20info%20about%20that%20appointment%20but%20cannot%20find%20about%20the%20info%20when%20was%20this%20appointment%20status%20changed.%20Is%20there%20any%20code%20or%20switch%20that%20can%20be%20used%20or%20any%20other%20way%20i%20can%20find%20out%20this%20info%20%3F%20i%20would%20really%20appreciate%20your%20comments%2Fhelp.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-294254%22%20slang%3D%22en-US%22%3ERe%3A%20Powershell%20Code%20to%20Check%20Who%20Changed%20Appointment%20Status%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-294254%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20moving%20this%20to%20the%20Windows%20PowerShell%20community%20for%20better%20visibility.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-293248%22%20slang%3D%22en-US%22%3ERe%3A%20Powershell%20Code%20to%20Check%20Who%20Changed%20Appointment%20Status%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-293248%22%20slang%3D%22en-US%22%3E%3CP%3EI%20would%20suggest%20also%20looking%20at%20the%20mailbox%20audit%20logs%2C%20if%20those%20were%20enabled%20at%20the%20time%20the%20change%20was%20made.%20But%20in%20general%2C%20I%20wouldn't%20get%20my%20hopes%20high%20on%20that%2C%20Exchange%20auditing%20leaves%20a%20lot%20to%20be%20desired.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-293179%22%20slang%3D%22en-US%22%3ERe%3A%20Powershell%20Code%20to%20Check%20Who%20Changed%20Appointment%20Status%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-293179%22%20slang%3D%22en-US%22%3E%3CP%3EHere%20is%20the%20attached%20command%20that%20i%20am%20using.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi All

This is my first post in the blog. I need some help please. We have an executive user who share his calendar with 2 of his Assistants. Appointment at his calendar changed to Tentative this morning, as per the user he never changed it and as per Assistants they neither. Now i am trying to find out from Calendar log using powershell if i can find who changed the appointment last time. Using Get-CalendarDiagnosticLog i am able to find the info about that appointment but cannot find about the info when was this appointment status changed. Is there any code or switch that can be used or any other way i can find out this info ? i would really appreciate your comments/help.

 

Thanks.

3 Replies
Highlighted

Here is the attached command that i am using.

Highlighted

I would suggest also looking at the mailbox audit logs, if those were enabled at the time the change was made. But in general, I wouldn't get my hopes high on that, Exchange auditing leaves a lot to be desired.

Highlighted

I'm moving this to the Windows PowerShell community for better visibility.