Admin Audit RRS feed

  • Question

  • hi guys,

    I am Global admin of Office365 environment along with some other admins, I noticed few days back that few Transport rules were created which triggered external emails moved to Quraantined, upon users complaint i disabled those rules but here comes higher management instructions and I have been told to do the admin audit and find out who is that admin. 

    I think i have to do last 6 months admin audit but can somebody guide how should i accomplish this task.

    appreciate your assistance. 

    Wednesday, July 3, 2019 6:42 PM


  • Thanks kyle,

    In Powershell command; can i go more specific like search with the name of the rule?

    Yes, you can. Here is an example:


    Kyle Xu

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact

    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    • Marked as answer by techtiger Thursday, July 4, 2019 9:35 AM
    Thursday, July 4, 2019 9:07 AM

All replies