I am learning/working in Exchange with a handful of accounts on-prem, some hybrid, and many only in Office365.
A phishing attempt caught a few hybrid-mailbox users and turned on their forwarding. I want to see all hybrid mailboxes with forwarding on and the address that mail is being forwarded to.
The Mail Forwarding setting in O365 doesn't show up in my script that selects ForwardingSmtpAddress
, and AutoForwardEnabled
. What other field can I select to list data that has been configured in O365 here?:
Also, my issue might be that I am running the Get-RemoteMailbox cmdlet without starting a PSSession to outlook.office365.com like many of our other scripts. If I start a new session, the get-mailbox cmdlet will only get mailboxes that are completely cloud-based. Get-mailbox from my mail server will I only get the handful of on-prem-only accounts. From my on-prem server, get-RemoteMailbox does report the hybrid boxes.
Thanks for any info pointing me in the right direction!