Exchange Q&A: Exchange Administration (12)

1.How to enable verbose logging?

Using the Set-AdminAuditLogConfig Cmdlet and set the parameter of LogLevel to Verbose.

2.Hot to enable the logging of the cmdlet that begin with the verb Test?

Using the Set-AdminAuditLogConfig Cmdlet and set the parameter of TestCmdletLoggingEnabled to $true.

3.What are the Audit log entry fields?

  • RunspaceId;
  • ObjectModified;
  • CmdletName;
  • CmdletParameters;
  • ModifiedProperties;
  • Caller;
  • Succeeded;
  • Error;
  • RunDate;
  • OriginatingServer;
  • Identity;
  • IsValid;
  • ObjectState.

4.What reports can be provided by the Auditing page in the EAC?

  • Administrator role group report;
  • Admin audit log report.

5.What search criteria can we specify when we run the Search-AdminAuditLog Cmdlet?

  • Cmdlets;
  • Parameters;
  • End date;
  • Start date;
  • Object IDs;
  • User IDs;
  • Successful completion.

6.How to override the count limit when we get search result using the Cmdlet of Search-AdminAuditLog?

Follow the parameter like that:

-ResultSize Unlimited

7.What are the difference between the Cmdlet Search-AdminAuditLog and New-AdminAuditLogSearch?

Instead of displaying the results of the search in the Exchange Management Shell, the New-AdminAuditLogSearch cmdlet performs the search and then sends the results to a recipient we specify via an email message. The results are included as an XML attachment to the email message.

8.What the Cmdlet of Write-AdminAuditLog used for?

To write a comment to the administrator audit log.

Still have questions? Click here to view Microsoft’s official documentation on Exchange.

发表评论

电子邮件地址不会被公开。 必填项已用*标注