Enable or disable mailbox audit logging for a mailbox in Exchange Server

Question

Hello, I'm testing the ability to Enable/Disable logging with powershell on my test environment of Office365 using the following reference.

https://learn.microsoft.com/en-us/exchange/policy-and-compliance/mailbox-audit-logging/enable-or-disable?view=exchserver-2019

I am attempting to isolate a user and run the command:
Set-Mailbox -Identity "Ben Smith" -AuditEnabled $false

However, upon running the command I receive and odd response that I'm not familiar with;
"WARNING: The command completed successfully but no settings of 'Ben Smith' have been modified."

I'm assuming that I am not allowed to change the status in an Office 365 demo because of some Security controls, does anyone have information on this?

Answer 1

Exchange Online has audit logging enabled by default on the org level, as detailed here: https://learn.microsoft.com/en-us/microsoft-365/compliance/enable-mailbox-auditing?view=o365-worldwide
Thus, the AuditEnabled parameter doesn't really matter. If you need to disable it for a particular mailbox, you create a "bypass" via the Set-MailboxAuditBypassAssociation cmdlet, as explained in the article above.