Configuring Settings for Exchange Online
Enabling Mailbox Auditing
To enable Cygna Auditor to collect audit data, configure the following settings through the Windows PowerShell.
- Start the Windows PowerShell.
-
Connect to your Exchange Online organization. Subsequently run the following commands:
$UserCredential = Get-Credential
Upon request, enter the Microsoft 365 global admin credentials.
$Session = New-PSSession –ConfigurationName Microsoft.Exchange –ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential –Authentication Basic -AllowRedirection
Import-PSSession $Session
-
Enable mailbox logging and configure auditing of all actions for all user mailboxes in your Exchange Online organization.
Get-mailbox -Filter {(RecipientTypeDetails -eq 'UserMailbox')} | ForEach {Set-Mailbox $_.Identity -AuditEnabled $true -AuditAdmin Copy,Create,FolderBind,HardDelete,MessageBind,Move,MoveToDeletedItems,SendAs,SendOnBehalf,SoftDelete,Update -AuditDelegate Create,FolderBind,HardDelete,Move,MoveToDeletedItems,SendAs,SendOnBehalf,SoftDelete,Update -AuditOwner Create,HardDelete,MailboxLogin,Move,MoveToDeletedItems,SoftDelete,Update }
Continue reading:
