Display the list of mailbox actions that are currently being for a mailbox for each logon type:
1 2 3 |
Get–Mailbox <username> | Select–Object –ExpandProperty AuditOwner Get–Mailbox <username> | Select–Object –ExpandProperty AuditAdmin Get–Mailbox <username> | Select–Object –ExpandProperty AuditDelegate |
Enable rest of the auditing actions
1 2 3 |
get–mailbox elau | set–mailbox –auditowner @{Add=“create”,“softdelete”,“harddelete”,“update”,“move”,“movetodeleteditems”,“mailboxlogin”,“updatefolderpermissions”} get–mailbox elau | set–mailbox –auditadmin @{Add=“create”,“folderbind”,“messagebind”,“sendas”,“sendonbehalf”,“softdelete”,“harddelete”,“update”,“move”,“copy”,“movetodeleteditems”,“updatefolderpermissions”} get–mailbox elau | set–mailbox –auditdelegate @{Add=“create”,“folderbind”,“sendas”,“sendonbehalf”,“softdelete”,“harddelete”,“update”,“move”,“movetodeleteditems”,“updatefolderpermissions”} |
Full list:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 |
“update”, “copy”, “move”, “movetodeleteditems”, “softdelete”, “harddelete”, “folderbind”, “sendas”, “sendonbehalf”, “messagebind”, “create”, “mailboxlogin”, “updatefolderpermissions”, “addfolderpermissions”, “modifyfolderpermissions”, “removefolderpermissions”, “updateinboxrules”, “updatecalendardelegation”, “recorddelete”, “applyrecord”, “mailitemsaccessed”, “updatecompliancetag” |
Restoring to default:
1 |
Set–Mailbox <username> –DefaultAuditSet Admin,Delegate,Owner |
testest test