Shared Mailboxes Activity Report
We're looking to audit our shared mailboxes and see a date in which they were last accessed. We have 77 shared mailboxes but I can't find a way to do this via Office 365 or via PowerShell. Am I missing a simple way to do this or is there no way to do this yet?
Ideally, we'd like the report to show when the shared mailbox was last accessed/used so we can determine if we can close them or not.
Thanks.
Ideally, we'd like the report to show when the shared mailbox was last accessed/used so we can determine if we can close them or not.
Thanks.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
https://docs.microsoft.com/en-us/office365/admin/activity-reports/activity-reports?view=o365-worldwide
Also How to detect who was accessing shared mailbox.
Open PowerShell → Run the following command to connect with Exchange Online instance and enter your credentials in the pop-up window:
$UserCredential = Get-Credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection
Import-PSSession $Session
To enable mailbox auditing run:
For a single mailbox:
Set-Mailbox –Identity "TestUser" -AuditEnabled $true
For all mailboxes:
$UserMailboxes = Get-mailbox -Filter {(RecipientTypeDetails -eq 'UserMailbox')} $UserMailboxes | ForEach {Set-Mailbox $_.Identity -AuditEnabled $true}
To check what mailboxes have auditing enabled run:
Get-Mailbox | FL Name,AuditEnabled
Open Exchange Administration Center → Navigate to "Compliance Management" Auditing.
Click "Run a non-owner mailbox access report". You will get the report on non-owner access to all mailboxes with enabled auditing over the past two weeks.
To view non-owner access to a specific mailbox Click on a mailbox to view all non-owner access events with the details.