Hello All,
I have a interesting question,I activated Mailbox Audit Logging but when I try to sarch mail logs (I write below command) it always just goes a line below,there is nothing after run thise command,is this wrong ?
Search-MailboxAuditLog -Identity test -LogonTypes Owner -ShowDetails
-StartDate 11/20/2012 -EndDate 11/21/2012 | Where-Object
{$_.Operation -eq "HardDelete"}
Also I can't see anything in ECP,is my command true?Set-Mailbox -Identity "user" -AuditEnabled $true