NOTE: Authorization to use the administration tasks on the Administrations Tasks tab is defined using the Application User Interface page under the Configuration task list. If you are denied access to the tasks on this page, see the Change Auditor User Guide for more information about how to gain access. |
The following information is displayed for each template:
2 |
Click Auditing. |
3 |
Select Office 365 (under Applications). |
4 |
Click Add to open the auditing wizard. |
Ensure the following permissions are assigned to the Azure web application: |
7 |
Click Select agent to view available agents and whether they are assigned to an Office 365 auditing template. The Office 365 cell contains ‘None’ if an agent is not assigned to a template, or ‘Auditing’ if it is assigned to a template. From this list, select the agent to capture the events and click OK. |
b |
Click Next to select the activities to audit within the Exchange Online organization. |
All changes made by administrators to the Office 365 Exchange Online organization. | |||||
Set tenant mailbox auditing settings
|
| ||||
To optionally add owner auditing on specific mailboxes, enable the Include Owner Activity option. The "Owner Activity" audited on a configured mailbox include folder, message, and login events.
| |||||
9 |
Click Next to optionally specify the generic events to exclude from auditing based on their operations. The operations are visible in the "Activity Name/Operation" column of the Office 365 built-in searches. Generic events are dynamically created when associated activity is detected that does not have a corresponding event defined in Change Auditor. See Working with generic Office 365 and Azure Active Directory events for more information. |
10 |
Click Finish to create the template. |
2 |
Click Auditing. |
3 |
Select Office 365 (under Applications). |
4 |
Select the template and click Edit to open the auditing wizard. |
Ensure the following permissions are assigned to the Azure web application: |
7 |
If you are auditing Exchange Online, click Next to update the auditing configuration account password or enter a new auditing configuration account. The account must be a user with the Exchange Administrator role. |
8 |
Click Next to update the events to audit. |
All changes made by administrators to the Exchange Online organization. | |||||
Set tenant mailbox auditing settings
|
| ||||
To optionally add owner auditing on specific mailboxes, enable the Include Owner Activity option. The "Owner Activity" audited on a configured mailbox include folder, message, and login events.
| |||||
9 |
Click Close. |
10 |
Click Next to optionally specify the generic events to exclude from auditing based on their operations. The operations are visible in the "Activity Name/Operation" column of the Office 365 built-in searches. Generic events are dynamically created when associated activity is detected that does not have a corresponding event defined in Change Auditor. |
11 |
Click Finish to apply the updates. |
Disabling a template temporarily stops auditing activities without having to remove the template.
1 |
• |
Place your cursor in the Status cell for the auditing template to disable, click the arrow control, and select Disabled. |
2 |
To re-enable the auditing template, use the Enable option in either the Status cell or right-click menu. |
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. 利用規約 プライバシー Cookie Preference Center