Powershell command to enable Office 365 Mailbox Auditing across all users.

Again, another post pretty much for my reference.

The command to enable auditing across all mailboxes is:

Get-Mailbox -ResultSize Unlimited -Filter {RecipientTypeDetails -eq "UserMailbox"} | Set-Mailbox -AuditEnabled $true

Command has been taken from this excellent guide “1234n6: Investigating Office365 Account Compromise without the Activities API“.

This entry was posted in Uncategorized. Bookmark the permalink.

Comment on this topic

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s