July 2017
Intermediate to advanced
648 pages
31h 9m
English
Configuring auditing for mailboxes can only be done using the Set-Mailbox cmdlet. By default, no mailbox is enabled for auditing. To enable mailbox auditing for the CEO's mailbox, and check what actions are logged by default, you use the following cmdlets:
Set-Mailbox CEO -AuditEnabled $True
Get-Mailbox CEO | Select Audit*

If the default actions being audited are not ideal, you can easily tweak them to meet your requirements. For example, if you also want to audit the Copy action for admins and the MoveToDeletedItems action for delegates, you use the following cmdlet:
Set-Mailbox CEO -AuditAdmin @{Add="Copy"} `
-AuditDelegate ...Read now
Unlock full access