View messages that have been "Sent As" RRS feed

  • Question

  • With Get-MessageTrackingLog I can pretty much see the email that have been sent by and sent to and such....but I have a couple of users that have the permission to send as another email address/account.

    How can I see those messages that have been sent by a user but from another email account?
    Sunday, October 28, 2018 6:56 PM

All replies

  • Hi Arvindmundhe,

    I am sorry, this is the Machine Learning Server forum. It seems like your question is related to Exchange and might be better off in the Exchange forum.

    thanks, Jeroen

    Friday, January 4, 2019 9:19 PM
  • For that you have to enable mailbox auditing and after that you can search for audit logs.

    To enable auditing run below

    Set-Mailbox  –Identity Test1 –AuditEnabled $true

    Be default logs age is 90 days and you can modify by running below:-

    Set-mailbox –identity Krishna.Kumar –AuditlogAgelimit 120

    Now you can search for audit logs.

    Here is sample query for the same:-

    Search-MailboxAuditLog -Identity Test -LogonTypes Admin,Delegate -ShowDetails -StartDate 1/4/2019 -EndDate 1/5/2019 | Where-Object {$_.Operation -eq “sendas”}

    Thanks, Ashish MCITP, MCT, MCSE

    • Proposed as answer by Tech2019 Sunday, January 6, 2019 3:59 AM
    Friday, January 4, 2019 9:38 PM
  • Please stop replying to this thread and take it to the Exchange forum.
    Monday, January 7, 2019 5:01 PM