AntiMalware Status

How to check who accessed a shared mailbox

As any other company you may have bunch of shared mailboxes for different reasons. Some of the shared mailboxes are more important for business than others. However when multiple users have access to shared mailbox on [easyazon_link identifier=”1430268484″ locale=”US” tag=”wn0d5-20″] Exchange [/easyazon_link], sometimes things can go wrong and you would like to keep eye on this shared mailbox.

Here are few lines of [easyazon_link identifier=”1449322700″ locale=”US” tag=”wn0d5-20″] PowerShell [/easyazon_link] to setup auditing on mailbox and pull report who accessed the shared mailbox and what has been done:

# Enable Mailbox auditing in Exchange Management Shell
Set-Mailbox –Identity “SALES” -AuditEnabled $true

To retrieve the audit log, you can run this command:

Search-MailboxAuditLog -Identity "SALES" -LogonTypes Admin,Delegate -ShowDetails -StartDate MM/DD/YYYY -EndDate MM/DD/YYYY

If you would like to send the log to specified email address for safe keeping, you can add few more things to the [easyazon_link identifier=”1782173552″ locale=”US” tag=”wn0d5-20″] PowerShell [/easyazon_link] line:

New-MailboxAuditLogSearch "smtp.server.name" -Mailboxes "SALES" -LogonTypes Admin,Delegate -StartDate MM/DD/YYYY -EndDate MM/DD/YYYY –ShowDetails -StatusMailRecipients Admin@YourDomain.com

Enjoy!

[easyazon_image align=”none” height=”160″ identifier=”1430268484″ locale=”US” src=”http://blog.technotesdesk.com/wp-content/uploads/2015/06/513M8ZtXhWL._SL160_.jpg” tag=”wn0d5-20″ width=”130″]

Leave a Reply