您好：
1.请问您当前的Exchange服务器详细版本是什么？
Get-ExchangeServer |fl *version*
另外您管理员审核日志配置返回的结果与我上面提供的截图是否有差异？
2.根据我对相关问题的查询，还有可能与时区或时间格式有关。
以下这个案例也讨论了类似的错误
Search-AdminAuditLog
find all log entries but "Admin Audit Log" in EAC shows nothing
请查看这些相关信息
【【【
It appears that this problem may be related with regional settings.
If I run report though EAC, I find in Event Log event saying f.e.:
Cmdlet suceeded. Cmdlet Search-AdminAuditLog, parameters -StartDate "4/10/2015 12:00:00 AM" -EndDate "4/12/2015 12:00:00 AM" -ExternalAccess "False" -ResultSize "5000".
Please notice time format: M/D/Y ! while my system date format (and format set in regional seetings of OWA is YYYY-MM-DD)
Entering this command manually into EMS (using format M/D/Y) causes registering in Event Log new Event:
Cmdlet suceeded. Cmdlet Search-AdminAuditLog, parameters -StartDate "2015-04-10 00:00:00" -EndDate "2015-04-11 00:00:00".
This time date is in my system format YYYY-MM-DD
Also notice that if I swap day and month (M/D/Y vs. D/M/Y) given range is invalid (in the future) and I receive no data.
】】】
3.最后请查看事件查看器中是否有相关的报错。
此致,
Joyce Shen
如果以上回复对您有所帮助，建议您将其“标记为答复”. 如果您对我们的论坛支持有任何的建议，可以通过此邮箱联系我们：tnsf@microsoft.com.
Exchange Server 2016 管理员审核问题
