none
Search-MailboxAuditLog output

    Question

  • There's User2's mailbox with mailbox access audit enabled. I'm testing FolderBind access for a delegate.

    1) Search-MailboxAuditLog -Identity User2 -LogonTypes Delegate -StartDate 6/14/2012 -EndDate 6/15/2012 -ResultSize 2000

    - this command returns this output:

    RunspaceId               : 5da6b55a-96c3-4330-ae14-a3d65a00d64a
    MailboxGuid              : c01b7518-eeec-43ec-bbc9-d12811141c0a
    MailboxResolvedOwnerName : User2
    LastAccessed             : 6/15/2012 6:08:05 AM
    Identity                 : Test.com/SAPR/User2
    IsValid                  : True

    [PS] C:\Windows\system32>

    2) When I want to see all available fields I add -ShowDetails switch and see no output at all:

    Search-MailboxAuditLog -Identity User2 -LogonTypes Delegate -StartDate 6/14/2012 -EndDate 6/15/2012 -ResultSize 2000 -ShowDetails

    [PS] C:\Windows\system32>

    ???

    Regards,

    Michael

    Friday, June 15, 2012 2:07 PM

All replies

  • Are you a member of the Exch Org Management Group or Records Management?

    Sukh

    Friday, June 15, 2012 2:52 PM
  • Yes, of course, I use Administrator account. When I run Non-owner report in ECP I see all available fields, the problem arises only when using the shell.
    • Edited by MF47 Saturday, June 16, 2012 5:34 AM
    Saturday, June 16, 2012 5:32 AM
  • Strange, I get the same too,

    Sukh

    Monday, June 18, 2012 11:03 AM
  • MS reply: it is a bug. Should be corrected in SP2 Rollup 4.

    Regards,

    Michael

    Monday, July 09, 2012 7:02 AM