Thanks for the video! Just to clarify- for those of us managing business tenants( not enterprise tenants ) do we have to manually enable mailbox auditing via powershell?
Not anymore on new tenants that are created. Its on by default but if you want to turn in on for older tenants or if you would like to change what is audited, you can use powershell
@@t-minus365 thanks - its just that I ran an non-owner mailbox report and it turned up no results - which is why I figured I may need to enable mailbox auditing via powershell
Nice video. How would you automate the powershell login so you could pull down the results on a regular basis? It might be useful to then dump the CSV into an Elastic search instance.
You could set up access for unattended scripts with the v2 module. From there i would just use something like a job using azure functions or something like that which is a time based trigger to run the scripts docs.microsoft.com/en-us/powershell/exchange/app-only-auth-powershell-v2?view=exchange-ps&irgwc=1&OCID=AID2000142_aff_7795_1243925&tduid=%28ir__el0q6q3ujskftwbpkk0sohzgcu2xim3whdwu1uve00%29%287795%29%281243925%29%28je6NUbpObpQ-SxxV09Io7tYobTg6tx7jrg%29%28%29&irclickid=_el0q6q3ujskftwbpkk0sohzgcu2xim3whdwu1uve00#setup-app-only-authentication
Hi, I would to get information on how to export report consisting users' last logon, Created, with using online for mfa via powershell? Is there any steps and script to get such informations?
![Eminem - Somebody Save Me (feat. Jelly Roll) [Official Music Video]](http://i.ytimg.com/vi/Vwa0HenQMi4/mqdefault.jpg)
Thanks for the video!
Just to clarify- for those of us managing business tenants( not enterprise tenants ) do we have to manually enable mailbox auditing via powershell?
Not anymore on new tenants that are created. Its on by default but if you want to turn in on for older tenants or if you would like to change what is audited, you can use powershell
@@t-minus365 thanks - its just that I ran an non-owner mailbox report and it turned up no results - which is why I figured I may need to enable mailbox auditing via powershell
Nice video. How would you automate the powershell login so you could pull down the results on a regular basis? It might be useful to then dump the CSV into an Elastic search instance.
You could set up access for unattended scripts with the v2 module. From there i would just use something like a job using azure functions or something like that which is a time based trigger to run the scripts docs.microsoft.com/en-us/powershell/exchange/app-only-auth-powershell-v2?view=exchange-ps&irgwc=1&OCID=AID2000142_aff_7795_1243925&tduid=%28ir__el0q6q3ujskftwbpkk0sohzgcu2xim3whdwu1uve00%29%287795%29%281243925%29%28je6NUbpObpQ-SxxV09Io7tYobTg6tx7jrg%29%28%29&irclickid=_el0q6q3ujskftwbpkk0sohzgcu2xim3whdwu1uve00#setup-app-only-authentication
@@t-minus365 Awesome. Thanks 👍
Hi ande
Hi, I would to get information on how to export report consisting users' last logon, Created, with using online for mfa via powershell? Is there any steps and script to get such informations?
hi can you show me the example of ClientMachineName generated in the csv file? is it the hostname of the laptop?