Thursday, September 14, 2023

Exchange Online - Identify mailboxes with audit disabled

 

One of the Microsoft Secure Score recommendations is to ensure mailbox auditing for all users is enabled.
Although within the recommendation implementation there's a powershell command to do it organization wide, there's always the need to do it individually for resource mailboxes for example.

So, to enable auditing organization wide command is this one:

Now, to identify which mailboxes still aren't enabled, just run this command:

Finally, to enable auditing in that mailboxes, run this command for each one:

And you're done! :)

No comments:

Post a Comment