You also can’t enable it via using your delegated admin credentials, it just seems to revert you back to the settings for your own Office 365 tenant. It looks like Microsoft don’t allow you to run this particular script using Delegated Administration, though I’m not too sure why. The remote server returned an error: (401) Unauthorized. When I tried setting this up, it initially appeared to be working, though I soon received the following error: Since the PowerShell command for enabling the Unified Audit Log is just one line, I assumed we’d be able to add it as a script block and run it across all of our Office 365 customers at once. I’ve recently written a few posts on running bulk PowerShell operations across all of your customer’s Office 365 tenants.
USER MANAGEMENT ACTIVITY AUDIT HOW TO
How to Enable the Unified Audit Log on Multiple Office 365 tenants using Delegated Administration via PowerShell Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $true Run the following command to enable the Unified Audit Log:.Make sure your Office 365 tenant is ready for the Unified Audit Log by enabling Organization Customization:.Connect to Exchange Online via PowerShell as an administrator by following this guide.How to enable the Unified Audit Log via PowerShell for a single Office 365 tenant Click it to enable the Unified Audit Log. If it’s not enabled you’ll see a link to Start recording user and admin activities.How to enable the Unified Audit Log via the Security and Compliance Center for a single Office 365 tenant
If you’re only managing your own tenant, it’s quite simple to turn it on. How to enable the Unified Audit Log for a single Office 365 tenant Here’s how to get it set up in your own organisation, or if you’re a Microsoft Partner, how to script it for all of your customers using Delegated Administration and PowerShell. It can be frustrating when you come across a query or problem that could easily be resolved if you had access to the logs, only to find out they were never enabled in the first place. You can also set up custom alerting to receive notifications whenever specific activities occur.įor all of its usefulness, the most amazing thing about it is that it’s not turned on by default. You can run reports on deletions, shares, downloads, edits, reads etc, for all users and all products. It tracks every user and account action across all of the Office 365 services. Enabling the Unified Audit Log on all delegated Office 365 tenants via PowerShell What is the Office 365 Unified Audit Log?įor security and compliance in Office 365, the Unified Audit Log is probably the most important tool of all.
0 kommentar(er)
