Share via

DL Audit Logs

Rising Flight 6,456 Reputation points
2022-01-28T16:22:21.983+00:00

Hi All

On few of my exchange online DLs. Delivery Management settings have been modified for those DLs. How can i check DL audit logs to know who has modified the delivery management settings for those DLs. Experts guide me

Exchange Online
Exchange Online

A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.

Exchange | Exchange Server | Management
Exchange | Exchange Server | Management

The administration and maintenance of Microsoft Exchange Server to ensure secure, reliable, and efficient email and collaboration services across an organization.


Answer accepted by question author

Andy David - MVP 160.3K Reputation points MVP Volunteer Moderator
2022-01-28T16:39:41.89+00:00

the quick method:

Search-AdminAuditLog -Cmdlets Set-DistributionGroup  -StartDate  DD/MM/YY -EndDate DD/MM/YY   

You can also search by paramaters:

https://learn.microsoft.com/en-us/powershell/module/exchange/search-adminauditlog?view=exchange-ps

Was this answer helpful?

0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Aaron Xue-MSFT 2,601 Reputation points Moderator
    2022-01-31T02:28:31.387+00:00

    Agree with Andy.

    You need to enable the administrator audit log is enabled before you search the logs.

    Could run below command to check if the Administrator Audit logging has been enabled.

     Get-AdminAuditLogConfig | fl *LOG*
    

    If the adminiauditlogenabled status is false.

    Run below command to enable it

    Set-AdminAuditLogConfig -AdminAuditLogEnabled:$true
    

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.