This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 41%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
To verify that audit log search is turned on, I have to run the following command in Exchange Online PowerShell:
Get-AdminAuditLogConfig | FL UnifiedAuditLogIngestionEnabled
To connect to the Module ExchangeOnlineManagement I have run the command below:
Install-Module -Name ExchangeOnlineManagement
set-executionpolicy remotesigned -Scope CurrentUser -force
Connect-IPPSSession -ConnectionUri https://ps.protection.outlook.com/powershell-liveid/
Once connected I have tried with:
Get-AdminAuditLogConfig | FL UnifiedAuditLogIngestionEnabled
but I am receiving the error :
You are connecting to the wrong place. Connect-IPPSSession is for the Security and Compliance Center cmdlets, not Exchange Online. Use Connect-ExchangeOnline instead: https://learn.microsoft.com/en-us/powershell/exchange/connect-to-exchange-online-powershell?view=exchange-ps
I am still having this error. What am I doing wrong?
What permissions do you have in Exchange? If you only want to run this cmdlet (Get-, without actually making chances), the "View-Only Configuration" role is sufficient. By default, any of the following Role Groups would do: Compliance Management, Organization Management, Hygiene Management, View-Only Organization Management
If you also want to change the settings, you will need to be a member of Organization Management (Exchange Admin or Global Admin).
my actual Roles is "Security admin" however at the moment I need to check if auditing is ON.
I'm afraid this role does not include sufficient permissions in order to run Get-AdminAuditLogConfig. Request someone to add you to the View-Only Organization Management role group.
Ok, I'll. thanks
By the way the commands are correct?
--Import-Module ExchangeOnlineManagement
--Connect-ExchangeOnline -UserPrincipalName xxxxxxxxxx
I have noticed my PowerShell seems to be V1..... Should it be V2?
Either one is fine, but you do need the necessary permissions to run this cmdlet.