Change Auditor for Exchange 7.1.1 - Event Reference Guide

Introduction Change Auditor for Exchange Events

Exchange ActiveSync Monitoring Exchange Administrative Group Exchange Distribution List Exchange Mailbox Monitoring Exchange Organization Exchange Permission Tracking Exchange User

Log Events

InTrust for Exchange event log

Non-Owner Mailbox Access events Owner Mailbox Access events Mailbox Permission events Public Folder event Mailbox Protection events Store Mount events System events PowerShell cmdlet event ActiveSync events

Notes

Exchange Distribution List

Table 3. Exchange Distribution List events
Event	Description	Severity
Accept Messages Except From List Changed for Group	Created when the Accept Messages Except From Exchange distribution list has changed for a group.	Medium
Accept Messages Only From List Changed for Group	Created when the Accept Messages Only From Exchange distribution list has changed for a group.	Medium
Alias changed for Group	Created when the Alias is changed for a group.	Medium
Authenticated Users Delivery Restrictions Changed for Group	Created when the Authenticated Users Delivery Restriction has changed for a group.	Medium
Custom Attribute (1-15) Changed For Group	Created when one of 15 available Custom Attributes is changed for a group.	Medium
Distribution List - Accept Messages Only from Senders in Following List Changed	Created when the Message Delivery Restrictions setting that specifies that the group can accept messages only from a specified set of senders in the Exchange organization is modified. For more information, see Note 14.	Medium
Distribution List - Address List Membership Changed	Created when members are added or removed from the distribution list. For more information, see Note 14.	Medium
Distribution List - Alias Changed	Created when the alias property of an email distribution group is modified. For more information, see Note 14.	Medium
Distribution List - Bypass Moderation List Changed	Created when the Message Moderation setting that specifies the recipients who don’t require message approval to send messages to the distribution group is modified. For more information, see Note 14.	Medium
Distribution List - Created	Created when an email distribution group is created. For more information, see Note 14.	Medium
Distribution List - Custom Attribute 1 - 15 Changed	Created when a custom attribute parameter on an email distribution group is modified. For more information, see Note 14.	Medium
Distribution List - Deleted	Created when an email distribution group is removed from Microsoft® Exchange and Active Directory®. For more information, see Note 14.	Medium
Distribution List - Disabled	Created when a distribution group is disabled without removing the Active Directory object. For more information, see Note 14.	Medium
Distribution List - Display Name Changed	Created when the display name on an email distribution group is modified.	Medium
Distribution List - Email Address Policy Changed	Created when the email address policy on an email distribution group is modified.	Medium
Distribution List - Email Addresses Changed	Created when the email addresses on an email distribution group is modified. For more information, see Note 14.	Medium
Distribution List - Enabled	Created when a previously disabled email distribution group is enabled. For more information, see Note 14.	Medium
Distribution List - Expansion Server Changed	Created when the expansion server on an email distribution group is modified. For more information, see Note 14.	Medium
Distribution List - Group Moderator List Changed	Created when the group moderator list on an email distribution group is modified. For more information, see Note 14.	Medium
Distribution List - Hidden From Address List Changed	Created when the advanced distribution group setting, Hide from Exchange address lists, is modified. For more information, see Note 14.	Medium
Distribution List - Managed By Changed	Created when a different recipient is specified as a manager of a distribution group. For more information, see Note 14.	Medium
Distribution List - Maximum Message Size Changed	Created when the Mail Flow Setting that specifies the maximum message size that users are allowed to send to the distribution group is modified. For more information, see Note 14.	Medium
Distribution List - Member Depart Restriction Changed	Created when the setting used to determine whether a user is allowed to leave the distribution group without approval is modified. (MemberDepartRestriction) For more information, see Note 14.	Medium
Distribution List - Member Join Restriction Changed	Created when the setting used to determine whether owner approval is required to join the distribution group is modified. (MemberJoinRestriction) For more information, see Note 14.	Medium
Distribution List - Messages Sent to This Group Have to be Approved by Moderator Changed	Created when the Message Moderation setting that specifies that messages sent to the distribution group must be approved by a moderator is modified. For more information, see Note 14.	Medium
Distribution List - Name (Pre-Windows 2000) Changed	Created when the name of the group that is compatible with legacy versions of Windows® is modified. For more information, see Note 14.	Medium
Distribution List - Name Changed	Created when the name of the distribution group is modified. For more information, see Note 14.	Medium
Distribution List - Primary SMTP Address Changed	Created when the primary SMTP email address for the distribution group is modified. For more information, see Note 14.	Medium
Distribution List - Reject Messages From Sender Changed	Created when the list of recipients who aren’t allowed to send email messages to the distribution group is modified. For more information, see Note 14.	Medium
Distribution List - Require Sender Authentication Changed	Created when the Mail Flow setting that prevents anonymous users from sending messages to the distribution group is modified. For more information, see Note 14.	Medium
Distribution List - RoleAssignmentPolicy Changed	Created when the role assignment policy for a mailbox is modified. For more information, see Note 14.	Medium
Distribution List - Send Delivery Reports to Group Manager Changed	Created when the advanced distribution group setting, Send delivery reports to group manager, is modified. For more information, see Note 14.	Medium
Distribution List - Send Delivery Reports to Originator Changed	Created when the advanced distribution group setting, Send delivery reports to message originator, is modified. For more information, see Note 14.	Medium
Distribution List - Send Out of Office Message to Originator Changed	Created when the advanced distribution group setting, Send Out-of-office message to originator, is modified. (SendOofMessageToOrginatorEnabled) For more information, see Note 14.	Medium
Distribution List - SendModeratorNotifications Changed	Created when the SendModerationNotifications parameter is modified for a distribution group. For more information, see Note 14.	Medium
Distribution List - Simple Display Name Changed	Created when the advanced distribution group setting, Simple Display Name, is modified. For more information, see Note 14.	Medium
Distribution List Display Name Changed	Created when the display name for the distribution list has changed.	Medium
Distribution List Expansion Server Changed	Created when the expansion server has changed for a distribution list.	Medium
Email Addresses Changed for Group	Created when the email addresses are changed for a group.	Medium
Hide Group from Exchange Address Lists Changed	Created when the Hide Group setting in the Exchange distribution list has change for a group.	Medium
Mail Disabled for Group	Created when mail is disabled for a group.	Medium
Mail Enabled for Group	Created when mail is enabled for a group.	Medium
Message Size Limit Changed For Group	Created when the Message Size Limit is changed for a group.	Medium
Primary E-mail Address Changed For Group	Created when the Primary Email Address is changed for a group.	Medium
Send Delivery Reports to Group Owner Changed	Created when the Send Delivery Reports to Group Owner setting in the Exchange distribution list has changed for a group.	Medium
Send Delivery Reports to Message Originator Changed	Created when the Send Delivery Reports to Message Originator setting in the Exchange distribution list has changed for a group.	Medium
Send Out-of-Office Messages to Originator Changed	Created when the Send Out-of-Office Message to Originator setting in the Exchange distribution list has changed for a group.	Medium

Exchange Mailbox Monitoring

NOTE: Requirements unless specified otherwise:

•

Minimum supported Exchange Versions for Macintosh clients (EWS) 2013 and 2016

Table 4. Exchange Mailbox Monitoring events
Event	Description	Severity

Appointment Copied by Non-Owner	Created when an appointment is copied to a new folder in a mailbox by a user other than the owner. For more information, see Note 1. For more information, see Note 10. N/A for Macintosh clients.	Medium
Appointment Copied by Owner	Created when an appointment is copied to a new folder in a mailbox by the owner. (Disabled by default) N/A for Macintosh clients For more information, see Note 1. For more information, see Note 10.	Low
Appointment Copied in Shared Mailbox	Created when an appointment in a shared mailbox is copied. (Disabled by default) For more information, see Note 13. For more information, see Note 10. N/A for Macintosh clients.	Low
Appointment Created by Non-Owner	Created when an appointment is created in a folder of a mailbox by a user other than the owner. For more information, see Note 1.	Medium
Appointment Created by Owner	Created when an appointment is created in a folder of a mailbox by the owner. (Disabled by default) For more information, see Note 1.	Low
Appointment Created in Shared Mailbox	Created when an appointment is created in a shared mailbox. (Disabled by default) For more information, see Note 13.	Low
Appointment Deleted by Non-Owner	Created when an appointment is deleted from a folder of the mailbox by a user other than the owner and placed in the Deleted Items folder. For more information, see Note 1. N/A for Macintosh clients.	Medium
Appointment Deleted by Owner	Created when an appointment is deleted from a folder of a mailbox by the owner and placed in the Deleted Items folder. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Low
Appointment Deleted in Shared Mailbox	Created when an appointment is deleted from a folder of a shared mailbox by placed in the Deleted Items folder. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients.	Low
Appointment Modified by Non-Owner	Created when an appointment is modified by a user other than the owner. For more information, see Note 1.	Medium
Appointment Modified by Owner	Created when an appointment is modified by the owner. (Disabled by default) For more information, see Note 1.	Low
Appointment Modified in Shared Mailbox	Created when an appointment in a shared mailbox is modified. (Disabled by default) For more information, see Note 13.	Low
Appointment Moved by Non-Owner	Created when an appointment is moved from an old folder to a new folder in the mailbox by a user other than the owner. For more information, see Note 1. N/A for Macintosh clients.	Medium
Appointment Moved by Owner	Created when an appointment is moved from an old folder to a new folder in the mailbox by the owner. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Low
Appointment Moved in Shared Mailbox	Created when an appointment in a shared mailbox is moved. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients.	Low
Appointment Permanently Deleted by Non-Owner	Created when an appointment is permanently deleted from a folder of the mailbox by a user other than the owner. For more information, see Note 1.	Medium
Appointment Permanently Deleted by Owner	Created when an appointment is permanently deleted from a folder of the mailbox by the owner. (Disabled by default) For more information, see Note 1.	Low
Appointment Permanently Deleted in Shared Mailbox	Created when an appointment is permanently deleted from a shared mailbox. (Disabled by default) For more information, see Note 13.	Low
Appointment Read by Non-Owner	Created when an appointment in a folder of the mailbox is read by a user other than the owner. (Disabled by default) For more information, see Note 1.	Medium
Appointment Read by Owner	Created when an appointment in a folder of the mailbox is read by the owner. (Disabled by default) For more information, see Note 1. Macintosh clients supported versions: Outlook and Entourage: 2013 2016	Low
Appointment Read in Shared Mailbox	Created when an appointment in a shared mailbox is read. (Disabled by default) For more information, see Note 13.	Low
Calendar Opened by Non-Owner	Created when the Calendar folder in a mailbox is opened by a user other than the owner. (Disabled by default) For more information, see Note 1.	Medium
Calendar Opened by Owner	Created when the Calendar folder in a mailbox is opened by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 4.	Low
Contact Copied by Non-Owner	Created when a contact is copied to a new mailbox folder by a user other than the owner. For more information, see Note 1. For more information, see Note 10. N/A for Macintosh clients.	Medium
Contact Copied by Owner	Created when a contact is copied to a new mailbox folder by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 10. N/A for Macintosh clients.	Low
Contact Copied in Shared Mailbox	Created when a contact in a shared mailbox is copied. (Disabled by default) For more information, see Note 13. For more information, see Note 10. N/A for Macintosh clients	Low
Contact Created by Non-Owner	Created when a contact is created in a mailbox folder by a user other than the owner. For more information, see Note 1.	Medium
Contact Created by Owner	Created when a contact is created in a mailbox folder by the owner. (Disabled by default) For more information, see Note 1.	Low
Contact Created in Shared Mailbox	Created when a new contact is created in a shared mailbox. (Disabled by default) For more information, see Note 13.	Low
Contact Deleted by Non-Owner	Created when a contact is deleted from a mailbox folder by a user other than the owner and placed in the Deleted Items folder. For more information, see Note 1. N/A for Macintosh clients.	Medium
Contact Deleted by Owner	Created when a contact is deleted from a mailbox folder by the owner and placed in the Deleted Items folder. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Low
Contact Deleted in Shared Mailbox	Created when a contact deleted from a shared mailbox and placed in the Deleted Items folder. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients	Low
Contact Modified by Non-Owner	Created when a contact is modified by a user other than the owner. For more information, see Note 1.	Medium
Contact Modified by Owner	Created when a contact is modified by the owner. (Disabled by default) For more information, see Note 1.	Low
Contact Modified in Shared Mailbox	Created when a contact is a shared mailbox is modified. (Disabled by default) For more information, see Note 13.	Low
Contact Moved by Non-Owner	Created when a contact is moved from an old mailbox folder to a new mailbox folder by a user other than the owner. For more information, see Note 1. N/A for Macintosh clients.	Medium
Contact Moved by Owner	Created when a contact is moved from one mailbox folder to another by the owner. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Low
Contact Moved in Shared Mailbox	Created when a contact in a shared mailbox is moved. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients.	Low
Contact Permanently Deleted by Non-Owner	Created when a contact is permanently deleted from a folder of the mailbox by a user other than the owner. For more information, see Note 1.	Medium
Contact Permanently Deleted by Owner	Created when a contact is permanently deleted from a mailbox folder by the owner. (Disabled by default) For more information, see Note 1.	Low
Contact Permanently Deleted in Shared Mailbox	Created when a contact is permanently deleted from a shared mailbox. (Disabled by default) For more information, see Note 13.	Low
Contact Read by Non-Owner	Created when a contact in a mailbox folder is read by a user other than the owner. For more information, see Note 1.	Medium
Contact Read by Owner	Created when a contact in a mailbox folder is read by the owner. (Disabled by default) For more information, see Note 1. Macintosh clients supported versions: Outlook and Entourage: 2013 2016	Low
Contact Read in Shared Mailbox	Created when a contact is a shared mailbox is read. (Disabled by default) For more information, see Note 13.	Low
Contacts Opened by Non-Owner	Created when the Contacts folder in a mailbox is opened by a user other than the owner. For more information, see Note 1.	Medium
Contacts Opened by Owner	Created when the Contacts folder in a mailbox is opened by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 4.	Low
Folder Copied by Non-Owner	Created when a folder is copied within a mailbox by a user other than the owner. For more information, see Note 1. For more information, see Note 10. N/A for Macintosh clients.	Medium
Folder Copied by Owner	Created when a folder is copied within a mailbox by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 10. N/A for Macintosh clients.	Low
Folder Copied in Shared Mailbox	Created when a folder in a shared mailbox is copied. For more information, see Note 13. For more information, see Note 10. N/A for Macintosh clients.	Medium
Folder Created by Non-Owner	Created when a new folder is created in a mailbox by a user other than the owner. For more information, see Note 1.	Medium
Folder Created by Owner	Created when a new folder is created in a mailbox by the owner. (Disabled by default) For more information, see Note 1.	Low
Folder Created in Shared Mailbox	Created when a new folder is created in a shared mailbox. For more information, see Note 13.	Medium
Folder Deleted by Non-Owner	Created when a folder is deleted from a mailbox by a user other than the owner. For more information, see Note 1. Macintosh clients supported versions: Outlook and Entourage: 2013 2016	Medium
Folder Deleted by Owner	Created when a folder is deleted from a mailbox by the owner. (Disabled by default) For more information, see Note 1.	Low
Folder Deleted in Shared Mailbox	Created when a folder is deleted from a shared mailbox. For more information, see Note 13.	Medium
Folder Moved by Non-Owner	Created when a folder is moved within a mailbox by a user other than the owner. For more information, see Note 1.	Medium
Folder Moved by Owner	Created when a folder is moved within a mailbox by the owner. (Disabled by default) For more information, see Note 1.	Low
Folder Moved in Shared Mailbox	Created when a folder in a shared mailbox is moved. For more information, see Note 13.	Medium
Folder Permanently Deleted by Non-Owner	Created when a folder is permanently deleted from a mailbox by a user other than the owner. For more information, see Note 1.	Medium
Folder Permanently Deleted by Owner	Created when a folder is permanently deleted from a mailbox by the owner. (Disabled by default) For more information, see Note 1.	Low
Folder Permanently Deleted in Shared Mailbox	Created than a folder is permanently deleted from a shared mailbox. For more information, see Note 13.	Medium
Folder Renamed by Non-Owner	Created when a folder is renamed in a mailbox by a user other than the owner. For more information, see Note 1.	Medium
Folder Renamed by Owner	Created when a folder is renamed in a mailbox by the owner. (Disabled by default) For more information, see Note 1.	Low
Folder Renamed in Shared Mailbox	Created when a folder in a shared mailbox is renamed. For more information, see Note 13.	Medium
Inbox Opened by Non-Owner	Created when the Inbox folder in a mailbox is opened by a user other than the owner. For more information, see Note 1.	Medium
Inbox Opened by Owner	Created when the Inbox folder in a mailbox is opened by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 4.	Low
Mailbox Folder Permissions Changed	Created when the permissions for a folder in a mailbox are changed. NOTE: ‘Mailbox Folder Permissions Changed’ event is generated when mailbox owner changes its mailbox permissions even when owner mailbox auditing is not enabled. For more information, see Note 1. For more information, see Note 8. For more information, see Note 16. N/A for Macintosh clients.	Medium
Mailbox Opened by Non-Owner	Created when a Mailbox is opened by a user other than the owner. For more information, see Note 1.	Medium
Mailbox Opened by Owner	Created when a Mailbox is opened by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 4.	Low
Message Copied by Non-Owner	Created when a message in a mailbox is copied to a new mailbox or folder by a user other than the owner. For more information, see Note 1. N/A for Macintosh clients.	Medium
Message Copied by Owner	Created when a message in an old mailbox or folder is copied to a new mailbox or folder by the mailbox owner. (Disabled by default) For more information, see Note 1. For more information, see Note 4. N/A for Macintosh clients.	Low
Message Copied in Shared Mailbox	Created when a message in a shared mailbox is copied. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients.	Low
Message Created by Non-Owner	Created when a message is created in a mailbox by a user other than the owner. For more information, see Note 1. For more information, see Note 3. For more information, see Note 6. Macintosh clients supported versions: Outlook: 2013 2016	Medium
Message Created by Owner	Created when a message is created in a mailbox by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 3. For more information, see Note 4. For more information, see Note 6.	Low
Message Created in Shared Mailbox	Created when a new message is created in a shared mailbox. (Disabled by default) For more information, see Note 13.	Low
Message Deleted by Non-Owner	Created when a message is deleted from a mailbox by a user other than the owner and placed in the Deleted Items folder. For more information, see Note 1.	Medium
Message Deleted by Owner	Created when a message is deleted from a mailbox by the owner and placed in the Deleted Items folder. (Disabled by default) For more information, see Note 1. For more information, see Note 4.	Low
Message Deleted in Shared Mailbox	Created when a message is deleted from a shared mailbox and placed in the Deleted Items folder. (Disabled by default) For more information, see Note 13.	Low
Message Marked Unread by Non-Owner	Created when the message status of a read message is mark as unread by a user other than the owner. For more information, see Note 1.	Medium
Message Marked Unread by Owner	Created when the message status of a read message is mark as unread by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 4.	Low
Message Marked Unread in Shared Mailbox	Created when a message in a shared mailbox is marked as unread. (Disabled by default) For more information, see Note 13.	Low
Message Modified by Non-Owner	Created when a message is modified by a user other than the owner. For more information, see Note 1. Macintosh clients supported versions: Outlook and Entourage: 2013 2016	Medium
Message Modified by Owner	Created when a message is modified by the owner. (Disabled by default) For more information, see Note 1.	Low
Message Modified in Shared Mailbox	Created when a message in a shared mailbox is modified. (Disabled by default) For more information, see Note 13.	Low
Message Moved by Non-Owner	Created when a message in a mailbox is moved to a new mailbox or folder by a user other than the owner. NOTE: This event applies to messages moved into, out of or between mailboxes within the same message store that are not owned by the user. For more information, see Note 1. For more information, see Note 2. For more information, see Note 3.	Medium
Message Moved by Owner	Created when a message in an old mailbox or folder is moved to a new mailbox or folder by the mailbox owner. (Disabled by default) For more information, see Note 1. For more information, see Note 3. For more information, see Note 4.	Low
Message Moved in Shared Mailbox	Created when a message in a shared mailbox is moved. (Disabled by default) For more information, see Note 13.	Low
Message Permanently Deleted by Non-Owner	Created when a message is permanently deleted from a mailbox by a user other than the owner. For more information, see Note 1. For more information, see Note 3.	Medium
Message Permanently Deleted by Owner	Created when a message is permanently deleted from a mailbox by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 3. For more information, see Note 4.	Low
Message Permanently Deleted in Shared Mailbox	Created when a message is permanently deleted from a shared mailbox. (Disabled by default) For more information, see Note 13.	Low
Message Read by Non-Owner	Created when a message in a mailbox is read by a user other than the owner. For more information, see Note 1. For more information, see Note 2. For more information, see Note 17 .	Medium
Message Read by Owner	Created when a message in a mailbox is read by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 4. For more information, see Note 17 .	Low
Message Read in Shared Mailbox	Created when a message in a shared mailbox is read. (Disabled by default) For more information, see Note 13. For more information, see Note 17 .	Low
Object Copied by Non-Owner	Created when a generic message object in a mailbox folder is coped to a new mailbox folder by a user other than the mailbox owner. For more information, see Note 1. N/A for Macintosh clients.	Low
Object Copied by Owner	Created when a generic message object is a mailbox folder is copied to a new mailbox folder by the mailbox owner. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Medium
Object Copied in Shared Mailbox	Created when an object other than a message, contact, task or appointment in a shared mailbox is copied. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients.	Low
Object Created by Non-Owner	Created when a generic message object is created by a user other than the mailbox owner. For more information, see Note 1.	Low
Object Created by Owner	Created when a generic message object is created by the mailbox owner. (Disabled by default) For more information, see Note 1.	Medium
Object Created in Shared Mailbox	Created when an object other than a message, contact, task or appointment is created in a shared mailbox. (Disabled by default) For more information, see Note 13.	Low
Object Deleted by Non-Owner	Created when a generic message object in a mailbox folder is deleted (placed in the Deleted Items folder) by a user other than the mailbox owner. For more information, see Note 1. N/A for Macintosh clients.	Low
Object Deleted by Owner	Created when a generic message object in a mailbox folder is deleted (placed in the Deleted Items folder) by the mailbox owner. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Medium
Object Deleted in Shared Mailbox	Created when a message other than a message, contact, task or appointment is deleted from a shared mailbox and placed in the Deleted Items folder. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients.	Low
Object Marked Unread by Non-Owner	Created when a generic message object in a mailbox folder is marked unread by a user other than the mailbox owner. For more information, see Note 1. N/A for Macintosh clients.	Low
Object Marked Unread by Owner	Created when a generic message object in a mailbox folder is marked unread by the mailbox owner. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Medium
Object Marked Unread in Shared Mailbox	Created when a message other than a message, contact, task or appointment in a shared mailbox is marked as unread. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients.	Low
Object Modified by Non-Owner	Created when a generic message object in a mailbox folder is modified by a user other than the mailbox owner. For more information, see Note 1.	Low
Object Modified by Owner	Created when a generic message object in a mailbox folder is modified by the mailbox owner. (Disabled by default) For more information, see Note 1.	Medium
Object Modified in Shared Mailbox	Created when an object other than a message, contact, task or appointment in a shared mailbox is modified. (Disabled by default) For more information, see Note 13.	Low
Object Moved by Non-Owner	Created when a generic message object in a mailbox folder is moved to a new mailbox folder by a user other than the mailbox owner. For more information, see Note 1. N/A for Macintosh clients.	Low
Object Moved by Owner	Created when a generic message object in a mailbox folder is moved to a new mailbox folder by the mailbox owner. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Medium
Object Moved in Shared Mailbox	Created when an object other than a message, contact, task or appointment in a shared mailbox is moved. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients.	Low
Object Permanently Deleted by Non-Owner	Created when a generic message object in a mailbox folder is permanently deleted by a user other than the mailbox owner. For more information, see Note 1.	Low
Object Permanently Deleted by Owner	Created when a generic message object in a mailbox folder is permanently deleted by the mailbox owner. (Disabled by default) For more information, see Note 1.	Medium
Object Permanently Deleted in Shared Mailbox	Created when an object other than a message, contact, task or appointment is permanently deleted from a shared mailbox. (Disabled by default) For more information, see Note 13.	Low
Object Read by Non-Owner	Created when a generic message object in a mailbox folder is read by a user other than the mailbox owner. For more information, see Note 1.	Low
Object Read by Owner	Created when a generic message object in a mailbox folder is read by the mailbox owner. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Medium
Object Read in Shared Mailbox	Created when an object other than a message, contact, task or appointment in a shared mailbox is read. (Disabled by default) For more information, see Note 13.	Low
Public Folder Permissions Changed	Created when the permissions on a public folder are changed. For more information, see Note 1. For more information, see Note 8. N/A for Macintosh clients.	Medium
Shared Mailbox Folder Permissions Changed	Created when the permissions for a folder in a shared mailbox are changed. For more information, see Note 13.	Medium
Shared Mailbox Opened	Created when a shared mailbox is opened. (Disabled by default) For more information, see Note 13.	Low
Task Copied by Non-Owner	Created when a task is copied to a new mailbox folder by a user other than the owner. For more information, see Note 1. For more information, see Note 10. N/A for Macintosh clients.	Medium
Task Copied by Owner	Created when a task is copied to a new mailbox folder by the owner. (Disabled by default) For more information, see Note 1. For more information, see Note 10. N/A for Macintosh clients.	Low
Task Copied in Shared Mailbox	Created when a task in a shared mailbox is copied. (Disabled by default) For more information, see Note 13. For more information, see Note 10. N/A for Macintosh clients.	Low
Task Created by Non-Owner	Created when a task is created in a mailbox folder by a user other than the owner. For more information, see Note 1.	Medium
Task Created by Owner	Created when a task is created in a mailbox folder by the owner. (Disabled by default) For more information, see Note 1.	Low
Task Created in Shared Mailbox	Created when a new task is created in a shared mailbox. (Disabled by default) For more information, see Note 13.	Low
Task Deleted by Non-Owner	Created when a task is deleted from a mailbox folder by a user other than the owner and placed in the Deleted Items folder. For more information, see Note 1. N/A for Macintosh clients.	Medium
Task Deleted by Owner	Created when a task is deleted from a mailbox folder by the owner and placed in the Deleted Items folder. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Low
Task Deleted in Shared Mailbox	Created when a task is deleted from a shared mailbox and placed in the Deleted Items folder. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients.	Low
Task Modified by Non-Owner	Created when a task is modified by a user other than the owner. For more information, see Note 1.	Medium
Task Modified by Owner	Created when a task is modified by the owner. (Disabled by default) For more information, see Note 1.	Low
Task Modified in Shared Mailbox	Created when a task in a shared mailbox is modified. (Disabled by default) For more information, see Note 13.	Low
Task Moved by Non-Owner	Created when a task is moved from an old mailbox folder to a new mailbox folder by a user other than the owner. For more information, see Note 1. N/A for Macintosh clients.	Medium
Task Moved by Owner	Created when a task is moved from an old mailbox folder to a new mailbox folder by the owner. (Disabled by default) For more information, see Note 1. N/A for Macintosh clients.	Low
Task Moved in Shared Mailbox	Created when a task in a shared mailbox is moved. (Disabled by default) For more information, see Note 13. Macintosh clients supported versions: Outlook: 2013 2016	Low
Task Permanently Deleted by Non-Owner	Created when a task is permanently deleted from a mailbox folder by a user other than the owner. For more information, see Note 1.	Medium
Task Permanently Deleted by Owner	Created when a task is permanently deleted from a mailbox folder by the owner. (Disabled by default) For more information, see Note 1.	Low
Task Permanently Deleted in Shared Mailbox	Created when a task is permanently deleted from a shared mailbox. (Disabled by default) For more information, see Note 13.	Low
Task Read by Non-Owner	Created when a task in a mailbox folder is read by a user other than the owner. For more information, see Note 1.	Medium
Task Read by Owner	Created when a task in a mailbox folder is read by the owner. (Disabled by default) For more information, see Note 1.	Low
Task Read in Shared Mailbox	Created when a task in a shared mailbox is read. (Disabled by default) For more information, see Note 13. N/A for Macintosh clients.	Low
Tasks Opened by Non-Owner	Created when the Tasks folder in a mailbox is opened by a user other than the owner. For more information, see Note 1.	Medium
Tasks Opened by Owner	Created when the Tasks folder in a mailbox is opened by the owner. (Disabled by default.) For more information, see Note 1. For more information, see Note 4.	Low

Exchange Organization

Table 5. Exchange Organization events
Event	Description	Severity
Accepted Domain Definition Added To Hub Transport Configuration	Created when an Accepted Domain definition is added to the Organization Hub Transport Configuration.	Medium
Accepted Domain Definition Removed From Hub Transport Configuration	Created when an Accepted Domain definition is removed from the Organization Hub Transport Configuration.	Medium
Accepted Domain Definition Renamed	Created when an Accepted Domain definition is renamed.	Medium
ActiveSync Mailbox Policy Added To Organization Client Access Configuration	Created when an ActiveSync® Mailbox Policy is added to the Organization Client Access Configuration.	Medium
ActiveSync Mailbox Policy Allow Attachments To Be Downloaded Option Changed	Created when the Allow Attachments to be Downloaded option is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Allow Non-Provisionable Devices Option Changed	Created when the Allow Non-Provisionable Devices option is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Allow Simple Password Option Changed	Created when the Allow Simple Password option is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Enable Password Recovery Option Changed	Created when the Enable Password Recovery option is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Maximum Attachment Size Changed	Created when the Maximum Attachment Size is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Minimum Password Length Changed	Created when the Minimum Password Length is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Number of Failed Attempts Allowed Changed	Created when the Maximum Failed Password Attempts setting is changed for the ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Password Expiration Changed	Created when the Password Expiration setting is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Password History Changed	The Password History setting is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Password Required Option Changed	Created when the Password Required option is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Refresh Interval Changed	Created when the Refresh Interval is changed for the ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Removed From Organization Client Access Configuration	Created when an ActiveSync Mailbox Policy is removed from the Organization Client Access Configuration.	Medium
ActiveSync Mailbox Policy Renamed	Created when the ActiveSync Mailbox Policy is renamed.	Medium
ActiveSync Mailbox Policy Require Alphanumeric Password Option changed	Created when the Alphanumeric Password Required option is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Require Encryption On Device Changed	Created when the Require Device Encryption option is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Require Encryption On Device Option Changed	Created when the Require Device Encryption option is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy User Idle Timeout Changed	Created when the User Idle Timeout is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Mailbox Policy Windows File Shares Access Option Changed	Created when the Windows File Shares Access option is changed on ActiveSync® Mailbox Policy.	Medium
ActiveSync Mailbox Policy Windows SharePoint Services Access Option Changed	Created when the Windows SharePoint® Services Access option is changed on ActiveSync Mailbox Policy.	Medium
ActiveSync Web Site External URL Changed on Server	Created when the ActiveSync Web Site External URL is changed on an Outlook® Web Access Web Site on a server.	Medium
ActiveSync Web Site Internal URL Changed on Server	Created when the ActiveSync Web Site Internal URL is changed on an Outlook Web Access Web Site on a server.	Medium
Address Changed in UM IP Gateway	Created when the Gateway Address is changed in the UM IP Gateway.	Medium
Address List - Company Filter	Created when the Company filter property is modified for an address list. For more information, see Note 14.	Medium
Address List - Created	Created when a new address list is created. For more information, see Note 14.	Medium
Address List - Custom Attribute Filter	Created when a custom attribute filter is modified for an address list. For more information, see Note 14.	Medium
Address List - Deleted	Created when an existing address list is removed. For more information, see Note 14.	Medium
Address List - Department Filter	Created when the Department filter property is modified for an address list. For more information, see Note 14.	Medium
Address List - Display Name	Created when the display name is modified for an address list. For more information, see Note 14.	Medium
Address List - Included Recipient Types	Created when the included recipient type(s) property is modified for an address list. For more information, see Note 14.	Medium
Address List - Moved	Created when the address list is moved to a new container. For more information, see Note 14.	Medium
Address List - Recipient Container	Created when the recipient container property is modified for an address list. For more information, see Note 14.	Medium
Address List - Recipient Filter	Created when the recipient filter property is modified for an address list. For more information, see Note 14.	Medium
Address List - Renamed	Created when the name of an address list is changed. For more information, see Note 14.	Medium
Address List - State/Province Filter	Created when the state/province filter is modified for an address lit. For more information, see Note 14.	Medium
Address List - Updated	Created when the address list update process is initiated. For more information, see Note 14.	Medium
Address List Added to Offline Address Book	Created when an Address List is added to an Offline Address Book.	Medium
Address List Added To Organization Configuration	Created when an Address List is added to the Organization configuration.	Medium
Address List Paging - Disabled	Created when an address list paging was disabled for the Exchange organization. For more information, see Note 14.	Medium
Address List Paging - Enabled	Created when an address list paging was enabled for the Exchange organization. For more information, see Note 14.	Medium
Address List Removed From Offline Address Book	Created when an Address List is removed from Offline Address Book.	Medium
Address List Removed From Organization Configuration	Created when an Address List is removed from the Organization configuration.	Medium
Address List Renamed	Created when an Address List is renamed.	Medium
Address Space Added To Send Connector	Created when an Address space is added to a Send connector.	Medium
Address Space Removed From Send Connector	Created when an Address space is removed from a Send connector.	Medium
Age Limit For Folders Changed in Public Folders Database	Created when the Age Limit For Folders setting is changed for a Public Folders Database on Exchange Server.	Medium
Allow Announcement Interruption Option Changed in UM Dial Plan	Created when the Allow Informational Announcement To Be Interrupted option is changed in the UM Dial Plan.	Medium
Allow Automatic Forward Option Changed In Remote Domain Definition	Created when the Allow Automatic Forward option is changed in Remote Domain definition.	Medium
Allow Caller To Send Voice Messages Option Changed In UM Auto Attendant	Created when the Allow Caller To Send Voice Messages option is changed for the UM Auto Attendant.	Medium
Allow Caller To Transfer To Users Option Changed In UM Auto Attendant	Created when the Allow Caller To Transfer To Users option is changed for the UM Auto Attendant.	Medium
Allow Callers To Send Voice Message Option Changed In UM Dial Plan	Created when the Allow Callers To Send Voice Mail option is changed in the UM Dial Plan.	Medium
Allow Callers To Transfer Option Changed In UM Dial Plan	Created when the Allow Callers To Transfer To Users option is changed in the UM Dial Plan.	Medium
Allow Calls To Extensions Option Changed In UM Mailbox Policy	Created when the Allow Calls To Extensions option is changed in the UM Mailbox Policy.	Medium
Allow Calls To Same-Plan Users Option Changed In UM Mailbox Policy	Created when the Allow Calls To Users In The Same Dialing Plan option is changed in the UM Mailbox Policy.	Medium
Allow Common PIN Pattern Option Changed In UM Mailbox Policy	Created when the Allow Common Patters In PIN option is changed in the UM Mailbox Policy.	Medium
Allow Delivery Reports Option Changed In Remote Domain Definition	Created when the Allow Delivery Reports option is changed in Remote Domain definition.	Medium
Allow Faxes Option Changed in UM Dial Plan	Created when the Allow Users To Receive Faxes option is changed in the UM Dial Plan.	Medium
Allow Non-Delivery Reports Option Changed In Remote Domain Definition	Created when the Allow Non-Delivery Reports option is changed in Remote Domain definition.	Medium
Allow Outgoing Calls Option Changed in UM IP Gateway	Created when the Allow Outgoing Calls option is changed in the UM IP Gateway.	Medium
Allow Out-Of-Office Replies Option Changed In Remote Domain Definition	Created when the Allow Out-Of-Office Replies option was changed in Remote Domain definition.	Medium
Allow Transfer To Operator During Business Hours Option Changed In UM Auto Attendant	Created when the Allow Transfer To Operator During Business Hours option is changed for the UM Auto Attendant.	Medium
Allow Transfer To Operator During Non-Business Hours Option Changed In UM Auto Attendant	Created when the Allow Transfer To Operator During Non-Business Hours option is changed for the UM Auto Attendant.	Medium
Announcement Changed in UM Dial Plan	Created when the Informational Announcement is changed in the UM Dial Plan.	Medium
Audio Codec Changed In UM Dial Plan	Created when the Audio Codec is changed in the UM Dial Plan.	Medium
Basic Authentication Option changed on Receive Connector	Created when the Basic Authentication option is changed on a Receive connector on server.	Medium
Business Hours Greeting Changed for UM Auto Attendant	Created when the Business Hours Greeting is changed on the UM Auto Attendant.	Medium
Business Hours Main Menu Prompt Changed for UM Auto Attendant	Created when the Business Hours Main Menu Prompt is changed on the UM Auto Attendant.	Medium
Business Hours Schedule Changed for UM Auto Attendant	Created when the Business Hours Schedule is changed on the UM Auto Attendant.	Medium
Callers Can Contact Address List Changed In UM Auto Attendant	Created when the Allow Caller To Send Voice Messages To This Address List option has been changed for the UM Auto Attendant.	Medium
Callers Can Contact Address List Changed In UM Dial Plan	Created when the Callers Can Contact Address List is changed in the UM Dial Plan.	Medium
Callers Can Contact Auto Attendant Changed In UM Dial Plan	Created when the Callers Can Contact Auto Attendant is changed in the UM Dial Plan. For more information, see Note 7.	Medium
Callers Can Contact Extension Changed In UM Dial Plan	Created when the Callers Can Contact Extension is changed in the UM Dial Plan.	Medium
Callers Can Contact Option Changed In UM Auto Attendant	Created when the Allow Caller To Send Voice Messages option is changed for the UM Auto Attendant.	Medium
Callers Can Contact Option Changed In UM Dial Plan	Created when the Callers Can Contact option is changed in the UM Dial Plan.	Medium
Collect Organizational Health Data Changed	Created when one of the Organizational Health Data settings is changed.	Medium
Country Code Changed In UM Dial Plan	Created when the Country/Region Code is changed in the UM Dial Plan.	Medium
Database Availability Group - Added	Created when a Database Availability Group (DAG) is created in Active Directory using the New-DatabaseAvailabilityGroup cmdlet. For more information, see Note 14.	Medium
Database Availability Group - Alternate Witness Directory Changed	Created when the AlternateWitnessDirectory parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Alternate Witness Server Changed	Created when the AlternateWitnessServer parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Auto Dag All Servers Installed Changed	Created when the AutoDagAllServersInstalled parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Auto Dag Auto Reseed Enabled Changed	Created when the AutoDagAutoReseedEnabled parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Auto Dag Database Copies Per Database Changed	Created when the AutoDagDatabaseCopiesPerDatabase parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Auto Dag Database Copies Per Volume Changed	Created when the AutoDagDatabaseCopiesPerVolume parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Auto Dag Databases Root Folder Path Changed	Created when the AutoDagDatabasesRootFolderPath parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Auto Dag Disk Reclaimer Enabled Changed	Created when the AutoDagDiskReclaimerEnabled parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Auto Dag Total Number of Databases Changed	Created when the AutoDagTotalNumberOfDatabases parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Auto Total Number of Servers Changed	Created when the AutoTotalNumberOfServers parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Auto Dag Volumes Root Folder Path Changed	Created when the AutoDagVolumesRootFolderPath parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Dag Configuration Changed	Created when the DagConfiguration parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Database Availability Group Configuration Changed	Created when the DatabaseAvailablityGroupConfiguration parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet.) For more information, see Note 14.	Medium
Database Availability Group - Database Availability Group IP Addresses Changed	Created when the DatabaseAvailabilityGroupIpAddress parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Datacenter Activation Mode Changed	Created when the DatacenterActivationMode parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Manual Dag Network Configuration Changed	Created when the ManualDagNetworkConfiguration parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Network Compression Changed	Created when the NetworkCompression parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Network Encryption Changed	Created when the NetworkEncryption parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Removed	Created when an empty DAG is removed using the Remove-DatabaseAvailabilityGroup cmdlet. For more information, see Note 14.	Medium
Database Availability Group - Replay Lag Manager Enabled Changed	Created when the ReplayLagManagerEnabled parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Replication Port Changed	Created when the ReplicationPort parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Restored	Created when a DAG is restored as part of a datacenter switchover using the Restore-DatabaseAvailabilityGroup cmdlet. For more information, see Note 14.	Medium
Database Availability Group - Server Added	Created when a mailbox server is added to a DAG using the Add-DatabaseAvailabilityGroupServer cmdlet. For more information, see Note 14.	Medium
Database Availability Group - Server Removed	Created when a mailbox server is removed from a DAG using the Remove-DatabaseAvailabilityGroupServer cmdlet. For more information, see Note 14.	Medium
Database Availability Group - Started	Created when a DAG is restarted to reinstate a previously failed member using the Start-DatabaseAvailabilityGroup cmdlet. For more information, see Note 14.	Medium
Database Availability Group - Stopped	Created when a DAG is stopped to mark member(s) as failed using the Stop-DatabaseAvailabilityGroup cmdlet. For more information, see Note 14.	Medium
Database Availability Group - Witness Directory Changed	Created when the WitnessDirectory parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group - Witness Server Changed	Created when the WitnessServer parameter is modified for a DAG (Set-DatabaseAvailabilityGroup cmdlet). For more information, see Note 14.	Medium
Database Availability Group Network - Added	Created when a DAG network is created using the New-DatabaseAvailabilityGroupNetwork cmdlet. For more information, see Note 14.	Medium
Database Availability Group Network - Description Changed	Created when the Description parameter is modified for a DAG network (Set-DatabaseAvailabilityGroupNetwork cmdlet). For more information, see Note 14.	Medium
Database Availability Group Network - IgnoreNetwork Changed	Created when the IgnoreNetwork parameter is modified for a DAG network (Set-DatabaseAvailabilityGroupNetwork cmdlet). For more information, see Note 14.	Medium
Database Availability Group Network - Name Changed	Created when the Name parameter is modified for a DAG network (Set-DatabaseAvailabilityGroupNetwork cmdlet). For more information, see Note 14.	Medium
Database Availability Group Network - Removed	Created when a DAG network is removed using the Remove-DatabaseAvailabilityGroupNetwork cmdlet. For more information, see Note 14.	Medium
Database Availability Group Network - Replication Enabled Changed	Created when the ReplicationEnabled parameter is modified for a DAG network (Set-DatabaseAvailabilityGroupNetwork cmdlet). For more information, see Note 14.	Medium
Database Availability Group Network - Subnets Changed	Created when the Subnets parameter is modified for a DAG network (Set-DatabaseAvailabilityGroupNetwork cmdlet). For more information, see Note 14.	Medium
Database Can Be Overwritten By a Restore Changed for Public Folders Database	Created when the Database Can Be Overwritten By a Restore setting is changed for a Public Folders Database on an Exchange Server	Medium
Database Maintenance Interval Changed in Mailbox Database	Created when the Database Maintenance Interval is changed for a Mailbox Database on an Exchange Server.	Medium
Database Maintenance Interval Changed in Public Folders Database	Created when the Database Maintenance Interval is changed for a Public Folders Database on an Exchange Server	Medium
Default Language Changed In UM Dial Plan	Created when the Default Language setting is changed in the UM Dial Plan.	Medium
Default Public Folder Database Changed in Mailbox Database	Created when the Default Public Folder Database is changed in a Mailbox database.	Medium
Deleted Item Move Destination Folder Changed in Managed Folder Settings	Created when the Deleted Item Move Destination Custom Folder is changed for Managed Folder Settings in a Managed Folder.	Medium
Deleted Item Retention Option Changed in Managed Folder Settings	Created when the Deleted Item Retention option is changed for Managed Folder Settings in a Managed Folder.	Medium
Deleted Item Retention Period Action Option Changed in Managed Folder Settings	Created when the Deleted Item Retention Period Action option is changed for Managed Folder Settings in a Managed Folder.	Medium
Deleted Item Retention Period Changed in Managed Folder Settings	Created when the Deleted Item Retention Period is changed for Managed Folder Settings in a Managed Folder.	Medium
Deleted Item Retention Period Start Option Changed in Managed Folder Settings	Created when the Deleted Item Retention Period Start option is changed for Managed Folder Settings in a Managed Folder.	Medium
Delivery Status Notification (DSN) code for Transport Setting Changed	Created when a custom DSN message is created, modified or removed in your Exchange organization.	Medium
Dial Plan Added To UM Server	Created when the Dial Plan is added to a UM Server. For more information, see Note 7.	Medium
Dial Plan Removed From UM Server	Created when the Dial Plan is removed from a UM Server. For more information, see Note 7.	Medium
Display Senders Name On Messages Option Changed In Remote Domain Definition	Created when the Display Senders Name On Messages option is changed in Remote Domain definition.	Medium
Do Not Mount This Database at Start-up Changed for Mailbox Database	Created when the Do Not Mount This Database at Start-up setting is changed for a Mailbox database on an Exchange Server.	Medium
Do Not Mount This Store At Start-Up Changed in Public Folders Database	Created when the Do Not Mount This Store at Start-up setting is changed for a Public Folders database on an Exchange Server.	Medium
Do Not Permanently Delete Items Until Backed Up Changed for Mailbox Database	Created when the Do Not Permanently Delete Items Until Backed Up setting is changed for a Mailbox database on an Exchange Server.	Medium
Do Not Permanently Delete Items Until Backed Up Changed in Public Folders Database	Created when the Do Not Permanently Delete Items Until Backed Up setting is changed for a Public Folders database on an Exchange Server.	Medium
Edge Subscription Added To Organization Configuration	Created when the Edge Subscription is added to the Organization Configuration.	Medium
Edge Subscription Removed From Organization Configuration	Created when the Edge Subscription is removed from the Organization Configuration.	Medium
E-Mail Address Policy - Company Filter	Created when the Recipient is in a Company condition is modified for the e-mail address policy. (ConditionalCompany) For more information, see Note 14.	Medium
E-Mail Address Policy - Created	Created when a new e-mail address policy is created. For more information, see Note 14.	Medium
E-Mail Address Policy - Custom Attribute Filter	Created when one of the Custom Attribute equals Value conditions is modified for an e-mail address policy. (ConditionalCustomAttribute 1 - 15) For more information, see Note 14.	Medium
E-Mail Address Policy - Deleted	Created when an e-mail address policy is removed. For more information, see Note 14.	Medium
E-Mail Address Policy - Department Filter	Created when the Recipient is in a Department condition is modified for an e-mail address policy. (ConditionalDepartment) For more information, see Note 14.	Medium
E-Mail Address Policy - Disabled E-Mail Address Templates	Created when the parameter that defines the proxy addresses included in an e-mail address policy that are disabled is modified. (DisabledEmailAddressTemplates) For more information, see Note 14.	Medium
E-Mail Address Policy - Enabled E-Mail Address Templates	Created when the parameter that defines the proxy addresses included in an e-mail address policy that are enabled is modified. (EnabledEmailAddressTemplates) For more information, see Note 14.	Medium
E-Mail Address Policy - Included Recipient Types	Created when the recipient types to be included in the e-mail address policy is modified. (IncludedRecipients) For more information, see Note 14.	Medium
E-Mail Address Policy - Primary SMTP E-Mail Address Template	Created when the parameter that specifies the proxy addresses included in an e-mail address policy that are enabled is modified. (EnabledPrimarySMTPAddressTemplate) For more information, see Note 14.	Medium
E-Mail Address Policy - Priority	Created when the priority of an e-mail address policy is changed. For more information, see Note 14.	Medium
E-Mail Address Policy - Recipient Container	Created when the recipient container property is modified for an e-mail address policy. For more information, see Note 14.	Medium
E-Mail Address Policy - Recipient Filter	Created when the RecipientFilter parameter in an e-mail address policy is modified. For more information, see Note 14.	Medium
E-Mail Address Policy - Renamed	Created when an e-mail address policy is renamed. For more information, see Note 14.	Medium
E-Mail Address Policy - State/Province Filter	Created when the Recipient is in a State or Province condition is modified for an e-mail address policy. (ConditionalStateOrProvince) For more information, see Note 14.	Medium
E-Mail Address Policy - Updated	Created when the e-mail address policy update process is initiated. For more information, see Note 14.	Medium
Email Address Policy Added To Organization Configuration	Created when an Email Address Policy is added to the Organization Configuration.	Medium
Email Address Policy Email Address Filter List Changed	Created when the Email Address Filter List for Email Address Policy were changed.	Medium
Email Address Policy Priority Changed	Created when the Priority for Email Address Policy is changed.	Medium
Email Address Policy Query Filter Changed	Created when the Search Filter settings for Email Address Policy is changed.	Medium
Email Address Policy Removed From Organization Configuration	Created when an Email Address Policy is removed from the Organization Configuration.	Medium
Email Address Policy Renamed	Created when an Email Address Policy is renamed.	Medium
Email Address Policy Storage Filter Changed	Created when the Storage Filter setting for Email Address Policy is changed.	Medium
Enable Circular Logging Setting Changed for Mailbox Database	Created when the Enable Circular Logging setting is changed for a Mailbox database.	Medium
Enable Circular Logging Setting Changed for Public Folders Database	Created when the Enable Circular Logging setting is changed for a Public Folders database.	Medium
Enable Server UM Messaging Status Changed	Created when the Enable Server UM Messaging Status is changed on a server.	Medium
Exchange Cmdlet Executed	Created for generic Exchange PowerShell® commands that modify Exchange configurations. This event captures the information about the PowerShell Cmdlet that was run, including who executed it and any parameters that were provided to the Cmdlet.	Low
Exchange Database Availability Group Server - Group Membership Changed	Created when a mailbox server is added or removed from the Database Availability Group (DAG).	Medium
Exchange Database Location Changed for Public Store	Created when the Exchange Database Location is changed for a Public Store on Exchange Server.	Medium
Exchange Server Authentication Option changed on Receive Connector	Created when the Exchange Server Authentication option is changed on a Receive connector on a server.	Medium
Extension Associated with UM Auto Attendant	Created when the Extension is associated with the UM Auto Attendant.	Medium
Extension Disassociated from UM Auto Attendant	Created when the Extension is disassociated from the UM Auto Attendant.	Medium
External DNS Lookup Option Changed on Send Connector	Created when the External DNS Lookup option is changed on a Send connector.	Medium
External Postmaster Address Setting Changed	Created when the External Postmaster Address setting is changed in an Exchange organization.	Medium
Externally Secured Authentication Option Changed on Receive Connector	Created when the Externally Secured Authentication option is changed on a Receive connector on a server.	Medium
Fallback Auto Attendant Changed for UM Auto Attendant	Created when the Fallback Auto Attendant is changed on the UM Auto Attendant.	Medium
Fax Identity Changed In UM Mailbox Policy	Created when the Fax Identity is changed in the UM Mailbox Policy.	Medium
Fax Message Text Changed In UM Mailbox Policy	Created when the Fax Message text is changed in the UM Mailbox Policy.	Medium
Folder List Changed In Managed Folder Mailbox Policy	Created when the Folder list is changed in a Managed Folder Mailbox Policy. For more information, see Note 7.	Medium
Global Address List - Company Filter	Created when the company filter property is modified for a global address list. (ConditionalCompany) For more information, see Note 14.	Medium
Global Address List - Created	Created when a new Global Address List is created. For more information, see Note 14.	Medium
Global Address List - Custom Attribute Filter	Created when a custom attribute filter is modified for a global address list. (ConditionalCustomAttribute 1 - 15) For more information, see Note 14.	Medium
Global Address List - Deleted	Created when a Global Address List is removed. For more information, see Note 14.	Medium
Global Address List - Department Filter	Created when the department filter property is modified for a global address list. (ConditionalDepartment) For more information, see Note 14.	Medium
Global Address List - Included Recipient Types	Created when the included recipient type(s) property is modified for a global address list. (IncludedRecipients) For more information, see Note 14.	Medium
Global Address List - Recipient Container	Created when the recipient container property is modified for a global address list. (RecipientContainer) For more information, see Note 14.	Medium
Global Address List - Recipient Filter	Created when the recipient filter property is modified for a global address list. (RecipientFilter) For more information, see Note 14.	Medium
Global Address List - Renamed	Created when a Global Address List is renamed. For more information, see Note 14.	Medium
Global Address List - State/Province Filter	Created when the state/province filter is modified for a global address lit. (ConditionalStateOrProvince) For more information, see Note 14.	Medium
Global Address List - Updated	Created when the Global Address List update process is initiated. For more information, see Note 14.	Medium
Greeting Changed in UM Dial Plan	Created when the Welcome Greeting is changed in the UM Dial Plan.	Medium
Holiday Added To UM Auto Attendant	Created when a Holiday is added to the schedule for the UM Auto Attendant.	Medium
Holiday Changed In UM Auto Attendant	Created when a Holiday is changed in the schedule for the UM Auto Attendant.	Medium
Holiday Removed From UM Auto Attendant	Created when a Holiday is removed from the schedule for the UM Auto Attendant.	Medium
Hunt Group Added To UM IP Gateway	Created when a Hunt Group is added to the UM IP Gateway.	Medium
Hunt Group Removed From UM IP Gateway	Created when a Hunt Group is removed from the UM IP Gateway.	Medium
Incorrect PIN Mailbox Lockout Setting Changed In UM Mailbox Policy	Created when the Incorrect PIN Mailbox Lockout setting is changed in the UM Mailbox Policy.	Medium
Incorrect PIN Reset Setting Changed In UM Mailbox Policy	Created when the Incorrect PIN Reset setting is changed in the UM Mailbox Policy.	Medium
In-Country Number Format Changed In UM Dial Plan	Created when the In-Country/Region Number Format is changed in the UM Dial Plan.	Medium
In-Country Rule Group Added To UM Dial Plan	Created when the In-Country Rule Group is added to the UM Dial Plan.	Medium
In-Country Rule Group Added To UM Mailbox Policy	Created when the In-Country Rule Group is added to the UM Mailbox Policy.	Medium
In-Country Rule Group Removed From UM Dial Plan	Created when the In-Country Rule Group is removed from the UM Dial Plan.	Medium
In-Country Rule Group Removed From UM Mailbox Policy	Created when the In-Country Rule Group is removed from the UM Mailbox Policy.	Medium
Informational Announcement Changed for UM Auto Attendant	Created when the Informational Announcement is changed on the UM Auto Attendant.	Medium
Input Failures Before Disconnect Changed In UM Dial Plan	Created when the Input Failures Before Disconnect setting is changed in the UM Dial Plan.	Medium
Input Idle Timeout Changed In UM Dial Plan	Created when the Input Idle Timeout is changed in the UM Dial Plan.	Medium
Input Retries Changed In UM Dial Plan	Created when the Input Retries setting is changed in the UM Dial Plan.	Medium
Integrated Windows Authentication Option Changed on Receive Connector	Created when the Integrated Windows Authentication option is changed on a Receive connector on a server.	Medium
International Access Code Changed In UM Dial Plan	Created when the International Access Code is changed in the UM Dial Plan.	Medium
International Number Format Changed In UM Dial Plan	Created when the International Number Format is changed in the UM Dial Plan.	Medium
International Rule Group Added To UM Dial Plan	Created when the International Rule Group is added to the UM Dial Plan.	Medium
International Rule Group Added To UM Mailbox Policy	Created when the International Rule Group is added to the UM Mailbox Policy.	Medium
International Rule Group Removed From UM Dial Plan	Created when the International Rule Group is added to the UM Dial Plan.	Medium
International Rule Group Removed From UM Mailbox Policy	Created when the International Rule Group is removed from the UM Mailbox Policy.	Medium
Issue Warning at (KB) Limit Changed for Mailbox Database	Created when Issue Warning at (KB) Limit is changed for a Mailbox database.	Medium
Issue Warning at (KB) Limit Changed in Public Folders Database	Created when Issue Warning at (KB) Limit is changed in a Public Folders database.	Medium
Journal Recipient Changed for Mailbox Database	Created when the Journal Recipient setting is changed for a Mailbox database.	Medium
Journaling Label Changed in Managed Folder Settings	Created when the Journaling Label is changed for Managed Folder Settings in a Managed Folder.	Medium
Journaling Message Format Changed in Managed Folder Settings	Created when the Journaling Message Format is changed for Managed Folder Settings in a Managed Folder.	Medium
Journaling Option Changed in Managed Folder Settings	Created when the Journaling option is changed for Managed Folder Settings in a Managed Folder.	Medium
Journaling Rule Added To Organization Configuration	Created when the Journaling Rule is added to the Organization Configuration.	Medium
Journaling Rule Changed	Created when the Journaling Rule is changed.	Medium
Journaling Rule Removed From Organization Configuration	Created when the Journaling Rule is removed from the Organization Configuration.	Medium
Journaling Rule Renamed	Created when the Journaling Rule is renamed.	Medium
Keep Deleted Items for (Days) Limit Changed for Mailbox Database	Created when the Keep Deleted Items For (Days) Limit is changed for a Mailbox database in an Exchange Server.	Medium
Keep Deleted Items for (Days) Limit Changed in Public Folders Database	Created when the Keep Deleted Items For (Days) Limit is changed for a Public Folders database on an Exchange Server.	Medium
Keep Deleted Items for (Days) Limit Changed in Public Store	Created when the Keep Deleted Items For (Days) Limit is changed for a Public Store on an Exchange Server.	Medium
Keep Deleted Mailboxes for (Days) Limit Changed for Mailbox Database	Created when the Keep Deleted Items for (Days) Limit is changed for a Mailbox database.	Medium
Language Changed In UM Auto Attendant	Created when the Language is changed for the UM Auto Attendant.	Medium
Line Wrap Column Changed In Remote Domain Definition	Created when the Line Wrap Column is changed in Remote Domain definition.	Medium
Logon Failure Count Changed In UM Dial Plan	Created when the Logon Failures Before Disconnect setting is changed in the UM Dial Plan.	Medium
Mailbox Database - Allow Overwrite by Restore	Created when the AllowFileRestore parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Background Database Maintenance	Created when the BackgroundDatabaseMaintenance parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Circular Logging	Created when the CircularLoggingEnabled parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Clean Initiated	Created when the clean mailbox database process is initiated. For more information, see Note 14.	Medium
Mailbox Database - Created	Created when a new mailbox database object is created. For more information, see Note 14.	Medium
Mailbox Database - Data Move Replication Constraint	Created when the DataMoveReplicationConstraint parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Deleted Item Retention	Created when the DeletedItemRetention parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Deleted Item Retention Until Backup	Created when the RetainDeletedItemsUntilBackup parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Deleted Mailbox Retention	Created when the MailboxRetention parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - EDB File Path	Created when Exchange database (.edb) file location or file name is modified for a mailbox database. For more information, see Note 14.	Medium
Mailbox Database - Event History Retention Period	Created when the EventHistoryRetentionPeriod parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Exchange Search Indexing Enable/Disable	Created when the IndexEnabled parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Issue Warning At	Created when the IssueWarningQuota parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Journal Recipient	Created when the JournalRecipient parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Log Folder Path	Created when the location of the log folder is changed. For more information, see Note 14.	Medium
Mailbox Database - Mailbox Purged	Created when the MailboxRetention parameter that specifies how long to keep deleted mailboxes is modified. For more information, see Note 14.	Low
Mailbox Database - Maintenance Schedule	Created when the MaintenanceSchedule parameter that specifies when maintenance is to be performed on the mailbox database is modified. For more information, see Note 14.	Medium
Mailbox Database - Mount At Startup	Created when the MountAtStartup parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Offline Address Book	Created when the offline address book associated with the mailbox database is modified. For more information, see Note 14.	Medium
Mailbox Database - Prohibit Send and Receive At	Created when the ProhibitSendReceiveQuota parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Prohibit Send At	Created when the ProhibitSendQuota parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Provisioning Excluded	Created when the IsExcludedFromProvisioning parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Provisioning Suspended	Created when the IsSuspendedFromProvisioning parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Public Folder Database	Created when the public folder associated with the mailbox database is modified. For more information, see Note 14.	Medium
Mailbox Database - Quota Warning Message Schedule	Created when the QuotaNotificationSchedule parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Recoverable Items Folder Size	Created when the RecoverableItemsQuota parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Recoverable Items Folder Warning Size	Created when the RecoverableItemsWarningQuota parameter is modified. For more information, see Note 14.	Medium
Mailbox Database - Removed	Created when a mailbox database object is deleted. For more information, see Note 14.	Medium
Mailbox Database - Renamed	Created when a mailbox database object is renamed. For more information, see Note 14.	Medium
Mailbox Database - RPC Client Access Servers	Created when the RpcClientAccessServer parameter is modified. For more information, see Note 14.	Medium
Mailbox Database Copy - Activation Preference Changed	Created when the ActivationPreference parameter is modified for a mailbox database copy (Set-MailboxDatabaseCopy cmdlet). For more information, see Note 14.	Medium
Mailbox Database Copy - Added	Created when a passive copy of an existing active mailbox database is created using the Add-MailboxDatabaseCopy cmdlet. For more information, see Note 14.	Medium
Mailbox Database Copy - Database Copy Auto Activation Policy Changed	Created when the DatabaseCopyAutoActivationPolicy parameter is modified for a mailbox database copy (Set-MailboxDatabaseCopy cmdlet). For more information, see Note 14.	Medium
Mailbox Database Copy - Removed	Created when a passive copy of a mailbox database is removed using the Remove-MailboxDatabaseCopy cmdlet. For more information, see Note 14.	Medium
Mailbox Database Copy - Replay Lag Time Changed	Created when the ReplayLagTime parameter is modified for a mailbox database copy (Set-MailboxDatabaseCopy cmdlet). For more information, see Note 14.	Medium
Mailbox Database Copy - Resumed	Created when suspended replication and replay activity for a mailbox database copy is resumed using the Resume-MailboxDatabaseCopy cmdlet. For more information, see Note 14.	Medium
Mailbox Database Copy - Suspended	Created when replication and replay activity for a mailbox database copy is suspended using the Suspend-MailboxDatabaseCopy cmdlet. For more information, see Note 14.	Medium
Mailbox Database Copy - Truncation Lag Time Changed	Created when the TruncationLagTime parameter is modified for a mailbox database copy (Set-MailboxDatabaseCopy cmdlet). For more information, see Note 14.	Medium
Mailbox Database Copy - Updated	Created when a mailbox database copy is seeded or reseeded using the Update-MailboxDatabaseCopy cmdlet. For more information, see Note 14.	Medium
Mailbox Database Created in Organization	Created when a Mailbox database is created in an Exchange organization.	Medium
Mailbox Database Removed in Organization	Created when a Mailbox database is removed from an Exchange organization.	Medium
Mailbox Database Renamed in Organization	Created when a Mailbox database is renamed in an Exchange organization.	Medium
Mailbox Enabled Text Changed In UM Mailbox Policy	Created when the Mailbox Enabled text is changed in the UM Mailbox Policy.	Medium
Managed Custom Folder - Base Folder Only	Created when the BaseFolderOnly parameter is modified for a managed custom folder. For more information, see Note 14.	Medium
Managed Custom Folder - Comment	Created when the Comment parameter is modified for a managed custom folder. For more information, see Note 14.	Low
Managed Custom Folder - Created	Created when a new managed custom folder is created. For more information, see Note 14.	Medium
Managed Custom Folder - Folder Name	Created when the FolderName parameter that specifies the folder name as it appears in user’s mailboxes is modified for a managed custom folder. For more information, see Note 14.	Medium
Managed Custom Folder - Localized Comment	Created when the LocalizedComment parameter is modified for a managed custom folder. For more information, see Note 14.	Low
Managed Custom Folder - Localized Folder Name	Created when the LocalizedFolderName parameter is modified for a managed custom folder. For more information, see Note 14.	Medium
Managed Custom Folder - Must Display Comment	Created when the MustDisplayCommentEnabled parameter is modified for a managed custom folder. For more information, see Note 14.	Low
Managed Custom Folder - Removed	Created when a managed custom folder is removed from the Organization Mailbox Configuration. For more information, see Note 14.	Medium
Managed Custom Folder - Renamed	Created when a managed custom folder is renamed. For more information, see Note 14.	Medium
Managed Custom Folder - Storage Limit	Created when the StorageQuota parameter that specifies the storage size limit for the mailbox folder is modified. For more information, see Note 14.	Medium
Managed Custom Folder Added to Organization Mailbox Configuration	Created when the managed custom folder is added to the Organization Mailbox Configuration.	Medium
Managed Custom Folder Removed From Organization Mailbox Configuration	Created when the managed custom folder is removed from the Organization Mailbox Configuration.	Medium
Managed Custom Folder Renamed	Created when a managed custom folder is renamed.	Medium
Managed Default Folder - Base Folder Only	Created when the BaseFolderOnly parameter is modified for a managed default folder. For more information, see Note 14.	Medium
Managed Default Folder - Comment	Created when the Comment parameter is modified for a managed default folder. For more information, see Note 14.	Low
Managed Default Folder - Created	Created when a new managed default folder is created. For more information, see Note 14.	Medium
Managed Default Folder - Localized Comment	Created when the LocalizedComment parameter is modified for a managed default folder. For more information, see Note 14.	Low
Managed Default Folder - Must Display Comment	Created when the MustDisplayCommentEnabled parameter is modified for a managed default folder. For more information, see Note 14.	Low
Managed Default Folder - Removed	Created when a managed default folder is removed from the Organization Mailbox Configuration. For more information, see Note 14.	Medium
Managed Default Folder - Renamed	Created when a managed default folder is renamed. For more information, see Note 14.	Medium
Managed Default Folder Added to Organization Mailbox Configuration	Created when the managed default folder is added to the Organization Mailbox Configuration.	Medium
Managed Default Folder Removed From Organization Mailbox Configuration	Created when the managed default folder is removed from the Organization Mailbox Configuration.	Medium
Managed Default Folder Renamed	Created when the managed default folder is renamed.	Medium
Managed Folder Mailbox Policy Added To Organization Mailbox Configuration	Created when the Managed Folder Mailbox Policy is added to the Organization Mailbox Configuration.	Medium
Managed Folder Mailbox Policy Removed From Organization Mailbox Configuration	Created when the Managed Folder Mailbox Policy is removed from the Organization Mailbox Configuration.	Medium
Managed Folder Mailbox Policy Renamed	Created when the Managed Folder Mailbox Policy is renamed.	Medium
Managed Folder Settings Added	Created when Managed Folder Settings for a Managed Folder are added.	Medium
Managed Folder Settings Removed	Created when Managed Folder Settings for a Managed Folder are removed.	Medium
Managed Folder Settings Renamed	Created when the Managed Folder Settings for a Managed Folder are renamed.	Medium
Maximum Call Duration Changed In UM Dial Plan	Created when the Maximum Call Duration is changed in the UM Dial Plan.	Medium
Maximum Concurrent Calls Setting Changed On UM Server	Created when the Maximum Concurrent Calls setting is changed on a UM Server.	Medium
Maximum Greeting Duration Changed in UM Mailbox Policy	Created when the Maximum Greeting Duration is changed in the UM Mailbox Policy.	Medium
Maximum Greeting Duration Enabled Option Changed in UM Mailbox Policy	Created when the Maximum Greeting Duration Enabled option is changed in the UM Mailbox Policy.	Medium
Maximum Item Size (KB) Limit Changed in Public Folders Database	Created when the Maximum Item Size (KB) Limit setting is changed for a Public Folders database.	Medium
Maximum Recording Duration Changed In UM Dial Plan	Created when the Maximum Recording Duration is changed in the UM Dial Plan.	Medium
Message Delivery Default Max. Receiving Message Size Changed in Organization	Created when the Message Delivery Default Max. Receiving Message Size setting is changed in an Exchange organization.	Medium
Message Delivery Default Max. Recipients Changed in Organization	Created when the Message Delivery Default Max. Recipients setting is changed in an Exchange organization.	Medium
Message Delivery Default Max. Sending Message Size Changed in Organization	Created when the Message Delivery Default Max. Sending Message Size setting is changed in an Exchange organization.	Medium
Message Delivery IP Address(es) for Transport Setting Changed	Created when the Message Delivery IP address(es) are changed for the Transport setting in an Exchange organization.	Medium
Message Handling Option Changed For Accepted Domain Definition	Created when the Message Handling option is changed for an Accepted Domain definition.	Medium
Message Tracking Subject Logging Option Changed on Server	Created when the Message Tracking Subject Logging option is changed on a server.	Medium
MIME Character Set Changed In Remote Domain Definition	Created when the MIME Character Set setting is changed in Remote Domain definition.	Medium
Minimum PIN Length Changed In UM Mailbox Policy	Created when the Minimum PIN Length setting is changed in the UM Mailbox Policy.	Medium
Mobile Device Rule - Access Level Changed	Created when the access state parameter (allowed, blocked or quarantined) is modified for a mobile device access rule. For more information, see Note 14.	Medium
Mobile Device Rule - Characteristic Changed	Created when the characteristics in a mobile device access rule is changed. For more information, see Note 14.	Medium
Mobile Device Rule - Created	Created when a new mobile device access rule is created. For more information, see Note 14.	Medium
Mobile Device Rule - Query String Changed	Created when the query string in a mobile access device rule is changed. For more information, see Note 14.	Medium
Mobile Device Rule - Removed	Created when a mobile device access rule is removed. For more information, see Note 14.	Medium
Mutual Auth TLS Option Changed on Receive Connector	Created when the Mutual Auth TLS option is changed on a Receive connector on a server.	Medium
Mutual Auth TLS Option Changed on Send Connector	Created when the Mutual Auth TLS option is changed on a Send connector on a server.	Medium
Name Match Option Changed In UM Dial Plan	Created when the Matched Name Selection method is changed in the UM Dial Plan.	Medium
National Number Prefix Changed In UM Dial Plan	Created when the National Number Prefix is changed in the UM Dial Plan.	Medium
Non-Business Hours Greeting Changed for UM Auto Attendant	Created when the Non-Business Hours Greeting is changed on the UM Auto Attendant.	Medium
Non-Business Hours Main Menu Prompt Changed for UM Auto Attendant	Created when the Non-Business Hours Main Menu Prompt is changed on the UM Auto Attendant.	Medium
Non-Delivery Report Option Changed in UM Dial Plan	Created when the Non-Delivery Report option is changed in the UM Dial Plan.	Medium
Non-MIME Character Set Changed In Remote Domain Definition	Created when the Non-MIME Character Set setting is changed in a Remote Domain definition.	Medium
Offer Basic Authentication After TLS Option Changed on Receive Connector	Created when the Offer Basic Authentication After TLS option is changed on a Receive connector on a server.	Medium
Offline Address Book - Address Lists	Created when the address list included in an offline address book (OAB) is modified. For more information, see Note 14.	Medium
Offline Address Book - Client Support	Created when the supported clients for an OAB is modified. For more information, see Note 14.	Medium
Offline Address Book - Created	Created when an OAB is created. For more information, see Note 14.	Medium
Offline Address Book - Default	Created when a different OAB is designated as the default offline address book in your Exchange organization. For more information, see Note 14.	Medium
Offline Address Book - Deleted	Created when an OAB is removed. For more information, see Note 14.	Medium
Offline Address Book - Difference Files	Created when the DiffRetentionPeriod parameter that specifies how long OAB difference files are to be retained is modified. For more information, see Note 14.	Medium
Offline Address Book - Global Web Distribution	Created when the Web-based distribution is enabled or disabled for an offline address book. (GlobalWebDistributionEnabled) For more information, see Note 14.	Medium
Offline Address Book - Moved	Created when an offline address book is moved. For more information, see Note 14.	Medium
Offline Address Book - Public Folder Distribution	Created when the Enable public folder distribution property is enabled or disabled for an OAB. For more information, see Note 14.	Medium
Offline Address Book - Renamed	Created when the name of an OAB is modified. For more information, see Note 14.	Medium
Offline Address Book - Schedule	Created when the update schedule for an OAB is modified. For more information, see Note 14.	Medium
Offline Address Book - Update	Created when the OAB generation process has been initiated to update an offline address book. For more information, see Note 14.	Medium
Offline Address Book - Virtual Directories	Created when the virtual directory or directories associated with web-based distribution is modified. For more information, see Note 14.	Medium
Offline Address Book Distribution - Basic Authentication Enabled/Disabled	Created when the parameter that specifies whether Basic authentication is enabled on the OAB virtual directory is changed. (BasicAuthentication) For more information, see Note 14.	Low
Offline Address Book Distribution - Created	Created when a server is configured as a Web distribution point for an offline address book. For more information, see Note 14.	Medium
Offline Address Book Distribution - Extended Protection Flags	Created when the ExtendedProtectionFlags parameter is modified on the server that is configured as a Web distribution point for an offline address book. For more information, see Note 14.	Low
Offline Address Book Distribution - Extended Protection SPN List	Created when the ExtendedProtectionSPNList parameter is modified on the server that is configured as a Web distribution point for an offline address book. For more information, see Note 14.	Low
Offline Address Book Distribution - Extended Protection Token Checking Mode	Created when the ExtendedProtectionToken Checking parameter is modified on the server that is configured as a Web distribution point for an offline address book. For more information, see Note 14.	Low
Offline Address Book Distribution - External URL	Created when the external URL that the OAB virtual directory points to is modified. For more information, see Note 14.	Low
Offline Address Book Distribution - Internal URL	Created when the internal URL that the OAB virtual directory points to is modified. For more information, see Note 14.	Low
Offline Address Book Distribution - Polling Interval	Created when the time interval that the distribution service should poll the generation server for new updates is modified. For more information, see Note 14.	Low
Offline Address Book Distribution - Removed	Created when an offline address book is removed from the Organization configuration. For more information, see Note 14.	Medium
Offline Address Book Distribution - Require SSL	Created when the RequireSSL parameter is modified. For more information, see Note 14.	Low
Offline Address Book Distribution - Windows Authentication Enabled/Disabled	Created when the parameter the specifies whether Integration Windows authentication is permitted on the OAB virtual directory is modified. (WindowsAuthentication) For more information, see Note 14.	Low
Offline Address Book Added To Organization Configuration	Created when an Offline Address Book is added to the Organization configuration.	Medium
Offline Address Book Enable Public Folder Distribution Option Changed	Created when the Enable Public Folder Distribution option for an Offline Address Book is changed.	Medium
Offline Address Book Outlook 2003 (v. 4) Client Support Option Changed	Created when the Outlook 2003 (v. 4) Client Support option for an Offline Address Book is changed.	Medium
Offline Address Book Outlook 98 (v. 2) Client Support Option Changed	Created when the Outlook 98 SP1 (v. 2) Client Support option for an Offline Address Book is changed.	Medium
Offline Address Book Outlook 98 (v. 3) Client Support Option Changed	Created when the Outlook 98 SP2 (v. 3) Client Support option for an Offline Address Book is changed.	Medium
Offline Address Book Renamed	Created when an Offline Address Book is renamed.	Medium
Offline Address Book Update Schedule Changed	Created when the Update schedule for an Offline Address Book is changed.	Medium
Offline Address List Location Changed for Mailbox Database	Created when the Offline Address List Location is changed for a Mailbox database. Supported in Exchange 2010 only.	Medium
Operator Extension Changed In UM Auto Attendant	Created when the Operator Extension is changed for the UM Auto Attendant.	Medium
Operator Extension Changed In UM Dial Plan	Created when the Operator Extension is changed in the UM Dial Plan.	Medium
Organization Hub Transport Global Settings - Clear Categories	Created when the ClearCategories parameter that specifies whether to clear Microsoft® Office Outlook categories during content conversions is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Disclaimer Wrapper	Created when the ConvertDisclaimerWrapperToEml parameter that specifies the type of attachment the original message will be added as to a disclaimer is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - DSN Codes Forwarded to Postmaster	Created when the list of monitored DSNs on a Hub Transport server that are to be copied to the mailbox assigned to the Exchange recipient (Hub Transport) or to the mailbox assigned to the external postmaster address (Edge Transport) is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - DSN Conversion Mode	Created when the DSNConversionMode parameter that controls how Exchange handles delivery status notifications (DSNs) that are generated by earlier versions of Exchange or non-Exchange messaging systems is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Exchange 2003 Xech50 Authentication	Created when the Xexch50Enabled parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - External DSN Default Language	Created when the ExternalDsnDefaultLanguage parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - External DSN Language Detection	Created when the ExternalDsnLanguageDetectionEnabled parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - External DSN Max Message Size	Created when the maximum size of the original message attached to an external DSN message (ExternalDsnMaxMessageAttach Size) is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - External DSN Reporting Authority	Created when the ExternalDsnReporting Authority parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - External DSN Send Delay Notifications	Created when the ExternalDelayDsnEnabled parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - External DSN Send HTML	Created when the ExternalDsnHtml parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - External Postmaster Address	Created when the ExternalPostmasterAddress parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Header Promotion Mode	Created when the HeaderPromotionMode Setting parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Internal DSN Default Language	Created when the InternalDsnDefault Language parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Internal DSN Language Detection	Created when the InternalDsnLanguage DetectionEnabled parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Internal DSN Max Message Size	Created when the maximum size of the original message that generated an internal DSN message is modified. (InternalDsnMaxMessageAttachSize) For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Internal DSN Reporting Authority	Created when the InternalDsnReporting Authority parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Internal DSN Send Delay Notifications	Created when the InternalDelayDsnEnabled parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Internal DSN Send HTML	Created when the InternalDsnSendHtml parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Internal SMTP Servers	Created when the InternalSMTPServers parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Legacy Journaling Migration Enabled/Disabled	Created when the LegacyJournalingMigration Enabled parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Max Receive Message Size	Created when the setting that specifies the maximum message size that can be received by recipients in the organization is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Max Send Message Size	Created when the maximum message size that can be sent by senders in the organization is modified. (MaxSendSize) For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Max Transport Dumpster Database Size	Created when the maximum size of the transport dumpster on a Hub Transport server for each database is modified. (MaxDumpterSizePerDatabase) For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Max Transport Dumpster Time	Created when the MaxDumpsterTime parameter that specifies how long an e-mail message should remain in the transport dumpster on a Hub Transport server is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Maximum Message Recipients	Created when the maximum message size that can be received by recipients in the organization (MaxReceiveSize) is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Organization Federated Mailbox	Created when the SMTP address of the federated mailbox used for federated delivery with other organizations is modified. (OrganizationFederatedMailbox) For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - RFC 2231 Encoding Enabled/Disabled	Created when the Rfc2231EncodingEnabled parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Send Journaling Reports NDRs To	Created when the JournalingReportNdrTo parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Shadow Heartbeat Retry Count	Created when the ShadowHeartbeatRetry Count parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Shadow Heartbeat Timout	Created when the ShadowHeartbeatTimeout Interval parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Shadow Message Auto Discard	Created when the ShadowMessageAuto DiscardInterval parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Shadow Redundancy Enabled/Disabled	Created when the ShadowRedundancy Enabled parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Supervision Tags	Created when the SupervisonTags parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - TLS Receive Domain Secure List	Created when the TLSReceiveDomainSecure List parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - TLS Send Domain Secure List	Created when the TLSSendDomainSecureList parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Verify Secure E-Mail Submission	Created when the VerifySecureSubmitEnabled parameter is modified. For more information, see Note 14.	Medium
Organization Hub Transport Global Settings - Voice Mail Journaling Enabled/Disabled	Created when the VoicemailJournalingEnabled parameter is modified. For more information, see Note 14.	Medium
Outlook Anywhere Disabled For Server	Created when Outlook Anywhere is disabled for a server.	Medium
Outlook Anywhere Enabled For Server	Created when Outlook Anywhere is enabled for a server.	Medium
Out-Of-Office Message Types Delivered Changed In Remote Domain Definition	Created when the Out-Of-Office Message Types Delivered To This Domain option is changed in a Remote Domain definition.	Medium
Outside Line Access Code Changed In UM Dial Plan	Created when the Outside Line Access Code is changed in the UM Dial Plan.	Medium
OWA Mailbox Policy Added	Created when a new Outlook Web App (OWA) mailbox policy is added to an Exchange organization.	Medium
OWA Mailbox Policy Allowed File Extensions Changed	Created when the Allowed File Extensions are changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy Allowed MIME Types Changed	Created when the Allowed MIME Types are changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy Blocked File Extensions Changed	Created when the Blocked File Extensions are changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy Blocked MIME Types Changed	Created when the Blocked MIME Types are changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy Force Save File Extensions Changed	Created when the Force Save File Extensions are changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy Force Save MIME Types Changed	Created when the Force Save MIME Types are changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy Private Computer File Access Setting Changed	Created when the Private Computer File Access setting is changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy Public Computer File Access Setting Changed	Created when the Public Computer File Access setting is changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy Removed	Created when an Outlook Web App (OWA) mailbox policy is removed from an Exchange organization.	Medium
OWA Mailbox Policy Renamed	Created when an Outlook Web App (OWA) mailbox policy is renamed.	Medium
OWA Mailbox Policy Segmentation Setting Changed	Created when the Segmentation setting is changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy Unknown Files Setting Changed	Created when the Unknown Files setting is changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy WebReady Document Viewing File Types Setting Changed	Created when the WebReady Document Viewing File Types setting is changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy WebReady Document Viewing MIME Types Setting Changed	Created when the WebReady Document Viewing MIME Types setting is changed in an OWA Mailbox policy.	Medium
OWA Mailbox Policy WebReady Document Viewing Setting Changed	Created when the WebReady Document Viewing setting is changed in an OWA Mailbox policy.	Medium
OWA Web Site - Action for Unknown File/MIME Type	Created when the ActionForUnknownFileAnd MIMETypes parameter that specifies how to handle files that are not included in other File Access Management lists is modified. For more information, see Note 14.	Low
OWA Web Site - All Address Lists	Created when the AllAddressListsEnabled parameter which specifies the address lists available to the user is modified. For more information, see Note 14.	Low
OWA Web Site - Allowed File Types	Created when the AllowedFileTypes parameter that specifies the extensions of the file types that are allowed is modified. For more information, see Note 14.	Low
OWA Web Site - Allowed MIME Types	Created when the AllowedMimeTypes parameter that specifies the extensions of the MIME attachments that are allowed is modified. For more information, see Note 14.	Low
OWA Web Site - Blocked File Types	Created when the BlockedFileTypes parameter that specifies the extensions of attachments that are blocked is modified. For more information, see Note 14.	Low
OWA Web Site - Blocked MIME Types	Created when the BlockedMimeTypes parameter that specifies the MIME extensions of attachments that are blocked is modified. For more information, see Note 14.	Low
OWA Web Site - Calendar	Created when the CalendarEnabled parameter that specifies whether to enable the calendar for users is modified. For more information, see Note 14.	Low
OWA Web Site - Calendar Publishing	Created when the CalendarPublishingEnabled parameter that specifies whether users can publish their calendar from OWA is modified. For more information, see Note 14.	Low
OWA Web Site - Change Password	Created when the ChangePasswordEnabled parameter that specifies whether users can change their passwords from inside OWA is modified. For more information, see Note 14.	Log
OWA Web Site - Cleanup Level	Created when the ClientAuthCleanupLevel parameter that specifies how much of the cache is cleared when a user logs off in OWA is modified. For more information, see Note 14.	Low
OWA Web Site - Contacts	Created when the ContactsEnabled parameter that specifies whether Contacts are enabled for users is modified. For more information, see Note 14.	Low
OWA Web Site - Created	Created when a new Microsoft Office Outlook Web App virtual directory is created. For more information, see Note 14.	Medium
OWA Web Site - Default Client Language	Created when the DefaultClientLanguage parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Default Logon Domain	Created when the DefaultDomain parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Default Theme	Created when the DefaultTheme parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Delegate Access	Created when the DelegateAccessEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - E-Mail Signature	Created when the SignaturesEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Exchange 2003 URL	Created when the Exchange2003Url parameter that specifies the OWA URL for Exchange Server 2003 mailboxes is modified. For more information, see Note 14.	Low
OWA Web Site - Exchange ActiveSync Integration	Created when the ActiveSyncIntegration Enabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Explicit Logon	Created when the ExplicitLogonEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Extended Protection Flags	Created when the ExtendedProtectionFlags parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Extended Protection SPN List	Created when the ExtendedProtectionSPNList parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Extended Protection Token Checking Mode	Created when the ExtendedProtectionToken Checking parameter is modified. For more information, see Note 14.	Low
OWA Web Site - External Authentication Method	Created when the ExternalAuthentication Methods parameter is modified. For more information, see Note 14.	Low
OWA Web Site - External URL	Created when the ExternalURL parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Failback URL	Created when the FailbackURL parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Force Save Attachment Filtering	Created when the ForceSaveAttachment FilteringEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Force Save File Types	Created when the ForceSaveFileTypes parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Force Save MIME Types	Created when the ForceSaveMimeTypes parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Gzip Level	Created when the GzipLevel parameter that sets Gzip configuration information for the OWA virtual directory is modified. For more information, see Note 14.	Low
OWA Web Site - Information Rights Management (IRM)	Created when the IRMEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Instant Messaging	Created when the InstantMessagingEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Instant Messaging Certificate Thumbprint	Created when the InstantMessagingCertificate Thumbprint parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Instant Messaging Server Name	Created when the InstantMessagingServer Name parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Instant Messaging Type	Created when the InstantMessagingType parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Internal Authentication Method	Created when the LiveIdAuthentication parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Internal URL	Created when the InternaURL parameter that specifies the host name of the Exchange server used for connections from inside the firewall is modified. For more information, see Note 14.	Low
OWA Web Site - Journal	Created when the JournalEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Junk E-Mail Filtering	Created when the JunkEmailEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Legacy Redirect	Created when the LegacyRedirectType parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Live ID Authentication	Created when the LiveIdAuthentication parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Logon and Error Language	Created when the LogonAndErrorLanguage parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Logon Format	Created when the LogonFormat parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Notes	Created when the NotesEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Notification Interval	Created when the NotificationInterval parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Organization Features	Created when the OrganizationEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Outbound Character Set	Created when the OutboundCharset parameter is modified. For more information, see Note 14.	Low
OWA Web Site - OWA Light	Created when the OWALightEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Premium Client	Created when the PremiumClientEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Private Computer Direct File Access	Created when the DirectFileAccessOnPrivate ComputersEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Private Computer Force WebReady Document Viewing	Created when the ForceWebReadyDocument ViewingFirstOnPrivateComputers parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Private Computer WebReady Document Viewing	Created when the WebReadyDocument ViewingOnPrivateComputersEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Public Computer Direct File Access	Created when the DirectFileAccessOnPublic ComputersEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Public Computer Force WebReady Document Viewing	Created when the ForceWebReadyDocument ViewingFirstOnPublicComputers parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Public Computer WebReady Document Viewing	Created when the WebReadyDocument ViewingOnPublicComputersEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Public Folders	Created when the PublicFoldersEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Recover Deleted Items	Created when the RecoverDeletedItems Enabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Redirect to Optimal Server	Created when the RedirectToOptimalOWA Server parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Reminders and Notifications	Created when the RemindersAndNotifications Enabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Remote File Servers Allowed	Created when the RemoteDocumentsAllowedServers parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Remote File Servers Blocked	Created when the RemoteDocumentsBlockedServers parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Remote File Servers Treat As Internal	Created when the RemoteDocumentsInternalDomainSuffixList parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Remote File Servers Unknown	Created when the RemoteDocumentsActionForUnknownServers parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Removed	Created when a Microsoft Office Outlook Web App virtual directory is removed. For more information, see Note 14.	Medium
OWA Web Site - Rules	Created when the RulesEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - S/MIME	Created when the SMimeEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Search Folders	Created when the SearchFoldersEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Show Global Address List	Created when the GlobalAddressListEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Silverlight	Created when the SilverlightEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Spelling Checker	Created when the SpellCheckerEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Supported WebReady File Types	Created when the list of file types supported by the conversion engine (WebReadyDocumentViewingSupportedFileTypes) is modified. For more information, see Note 14.	Low
OWA Web Site - Supported WebReady MIME Types	Created when the list of MIME types supported by the conversion engine (WebReadyDocumentViewingSupportedMimeTypes) is modified. For more information, see Note 14.	Low
OWA Web Site - Tasks	Created when the TasksEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Text Messaging	Created when the TextMessagingEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Theme Selection	Created when the ThemeSelectionEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Unified Messaging Integration	Created when the UMIntegrationEnabled parameter is modified. For more information, see Note 14.	Low
OWA Web Site - User Context Timeout	Created when the UserContextTimeout parameter is modified. For more information, see Note 14.	Low
OWA Web Site - Web Beacon and HTML Form Filtering	Created when the FilterWebBeaconsAndHtmlForms parameter is modified. For more information, see Note 14.	Low
OWA Web Site - WebReady Document Types	Created when the WebReadyDocumentViewingForAllSupportedTypes parameter is modified. For more information, see Note 14.	Low
OWA Web Site Added To Server	Created when the Outlook Web Access Web Site is added to a server.	Medium
OWA Web Site Authentication Method Changed on Server	Created when the Authentication Method is changed on an Outlook Web Access Web Site on a server.	Medium
OWA Web Site External Host Name Changed on Server	Created when the External Host Name is changed on an Outlook Web Access Web Site on a server.	Medium
OWA Web Site Feature Option Changed on Server	Created when the Feature option is changed on an Outlook Web Access Web Site on a server.	Medium
OWA Web Site Forms Logon Method Changed on Server	Created when the Forms Logon Method is changed on an Outlook Web Access Web Site on a server.	Medium
OWA Web Site Internal Host Name Changed on Server	Created when the Internal Host Name is changed on an Outlook Web Access Web Site on a server.	Medium
OWA Web Site Removed From Server	Created when the Outlook Web Access Web Site is removed from a server.	Medium
OWA Web Site Renamed On Server	Created when the Outlook Web Access Web Site was renamed on a server.	Medium
PIN History Length Changed In UM Mailbox Policy	Created when the PIN History Length is changed in the UM Mailbox Policy.	Medium
PIN Lifetime Changed In UM Mailbox Policy	Created when the PIN Lifetime is changed in the UM Mailbox Policy.	Medium
PIN Reset Text Changed In UM Mailbox Policy	Created when the PIN Reset text is changed in the UM Mailbox Policy.	Medium
Primary Dialing Method Changed In UM Dial Plan	Created when the Primary Dialing Method is changed in the UM Dial Plan.	Medium
Prohibit Post at (KB) Limit Changed in Public Folders Database	Created when the Prohibit Post At (KB) Limit setting is changed for a Public Folders database on an Exchange server.	Medium
Prohibit Send and Receive at (KB) Limit Changed for Mailbox Database	Created when the Prohibit Send and Receive at (KB) Limit is changed for a Mailbox database.	Medium
Prohibit Send at (KB) Limit Changed for Mailbox Database	Created when the Prohibit Send at (KB) Limit is changed for a Mailbox database.	Medium
Prompt Publishing Point Changed For UM Dial Plan	Created when the Prompt Publishing Point is changed for the UM Dial Plan.	Medium
Public Folder - Age Limit Changed	Created when the age limit for replicas property for a public folder is modified. (AgeLimit) For more information, see Note 14.	Low
Public Folder - Created	Created when a public folder is created. For more information, see Note 14.	Medium
Public Folder - Deleted	Created when a public folder is removed from all servers in your Exchange organization. For more information, see Note 14.	Medium
Public Folder - Deleted Item Retention	Created when the retain deleted items property for a public folder is modified. (RetainDeletedItemsFor) For more information, see Note 14.	Low
Public Folder - Hide From Address List	Created when the public folder’s general Exchange property that specifies whether the recipient is to be hidden from the global address list (GAL) and other address lists in the Exchange organization is modified. (HiddenFromAddressListsEnabled) For more information, see Note 14.	Low
Public Folder - Issue Warning At	Created when the Issue warning (KB) property for a public folder is modified. (IssueWarningQuota) For more information, see Note 14.	Low
Public Folder - Local Replica Age Limit	Created when the replication property that specified the age limit for items in a public folder is modified. (LocalReplicaAgeLimit) For more information, see Note 14.	Low
Public Folder - Maximum Item Size	Created when the storage quota property that specifies the maximum size of items (KB) that users can post to the public folder is modified. For more information, see Note 14.	Low
Public Folder - Per User Read State	Created when the general property that allows the user to see if a public folder messages has been read or unread in Outlook is changed. (PerUserReadStateEnabled) For more information, see Note 14.	Medium
Public Folder - Prohibit Post At	Created when the Prohibit post at (KB) property for a public folder is modified. (ProhibitPostQuota) For more information, see Note 14.	Low
Public Folder - Renamed	Created when the name of a public folder is changed. For more information, see Note 14.	Medium
Public Folder - Replicas	Created when a public folder database is added or removed from the replicas list in the replication properties for a public folder. (Replicas) For more information, see Note 14.	Low
Public Folder - Replication Schedule	Created when the replication schedule in the User public folder database replication schedule property for a public folder is modified. (ReplicationSchedule) For more information, see Note 14.	Low
Public Folder - Synchronization Started	Created when the update hierarchy action is started to synchronize the public folder hierarchy from one server to other servers on which public folder replicas reside. For more information, see Note 14.	Low
Public Folder - Use Age Limit Defaults	Created when the limits property that specifies whether to use the public folder database limits for a public folder is modified. (UseDatabaseAgeDefaults) For more information, see Note 14.	Low
Public Folder - Use Deleted Item Retention Defaults	Created when the use database retention defaults property for deleted items in a public folder is modified. (UseDatabaseRetentionDefaults) For more information, see Note 14.	Low
Public Folder - Use Quota Defaults	Created when the use database quota defaults property for a public folder is modified. (UseDatabaseQuotaDefaults) For more information, see Note 14.	Low
Public Folder - Use Replication Schedule Defaults	Created when the replication property that specifies whether to use the default replication schedule that is set on the public folder database is modified. (UseDatabaseRetentionSchedule) For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Accept Messages Only From	Created when the Mail Flow Settings property that specifies that the recipient can accept messages only from a specified set of senders is modified. (AcceptMessagesOnlyFrom parameters) For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Alias	Created when the alias property of a mail-enabled public folder is modified. For more information, see Note 14.	Medium
Public Folder (Mail Enabled) - Arbitration Mailbox	Created when the ArbitrationMailbox parameter that specifies the mailbox that is to be used to manage the moderation process is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Auto-Update E-Mail Address from Policy	Created when the E-Mail Addresses property that specifies whether to have the recipient’s e-mail addresses automatically updated based on changed made to e-mail address policies in your organization is enabled or disabled. For more information, see Note 14.	Medium
Public Folder (Mail Enabled) - Bypass Moderation	Created when the BypassModerationFromSendersOrMembers parameter is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Contacts	Created when the contacts associated with the public folder is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Custom Attributes	Created when a custom attribute for a mail-enabled public folder is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Deliver and Forward	Created when the Mail Flow Settings property that specifies whether to have a public folder’s e-mail messages delivered to both the public folder and to the forwarding address is modified. (DeliverToMailboxAndForward) For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Display Name	Created when the Display name property of a mail-enabled public folder is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - E-Mail Addresses	Created when e-mail addresses for the recipients of a mail-enabled public folder is modified or new e-mail addresses are added. For more information, see Note 14.	Medium
Public Folder (Mail Enabled) - Folder Type	Created when the PublicFolderType parameter is modified. For more information, see Note 14.	Medium
Public Folder (Mail Enabled) - Forwarding Address	Created when the Mail Flow Settings property that specifies the recipient to whom all e-mail messages sent to this public folder are to be forwarded is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Mail Disabled	Created when a public folder is mail disabled. For more information, see Note 14.	Medium
Public Folder (Mail Enabled) - Mail Enabled	Created when a public folder is mail enabled. For more information, see Note 14.	Medium
Public Folder (Mail Enabled) - Mail Tip	Created when the MailTip parameter is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Mail Tip Translations	Created when the MailTipTranslations parameter is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Max Receive Size	Created when the Mail Flow Settings property that specifies the maximum size (in KB) for messages that can be received is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Max Send Size	Created when the Mail Flow Settings property that specifies the maximum size (in KB) for messages that can be sent is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Moderated By	Created when the ModeratedBy parameter that specifies the list of users who are responsible for moderating the messages sent to this public folder is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Moderation	Created when the ModerationEnabled parameter that specifies whether to enable moderation or e-mail sent to the public folder is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Moderator Notification	Created when the SendModerationNotifications parameter is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Phonetic Display Name	Created when the PhoneticDisplayName parameter is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Primary E-Mail Address	Created when the primary return SMTP e-mail address is modified. For more information, see Note 14.	Medium
Public Folder (Mail Enabled) - Reject Messages From	Created when the Mail Flow Settings property that specifies that the recipient will reject messages from a specified set of senders is modified. (RejectMessagesFrom parameters) For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Require Sender Authentication	Created when the Mail Flow Settings property that prevents anonymous users from sending messages to the recipient is enabled or disabled. (RequireSenderAuthenticationEnabled) For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Send On Behalf	Created when the Mail Flow Settings property that grants a recipient permissions to send e-mail on behalf of the selected public folder is modified. (GrantSendOnBehalfTo) For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Simple Display Name	Created when the Simple display name property of a mail-enabled public folder is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - UM DTMF Map	Created when the UMDtmfMap parameter that specifies whether to create a user-defined DTMF map for the UM-enabled public folder is modified. For more information, see Note 14.	Low
Public Folder (Mail Enabled) - Windows E-Mail Address	Created when the WindowsEmailAddress parameter that specifies the value of the E-mail field of the Active Directory object is modified. For more information, see Note 14.	Medium
Public Folder Database - Age Limit	Created when the Limits setting that specifies an age limit for folders in the public folder database is modified. For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Allow Overwrite by Restore	Created when the option that allows the public folder database to be overwritten during a restore process is selected or cleared. (AllowFileRestore) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Background Database Maintenance	Created when the option to enable background database maintenance is selected or cleared for a public folder database. (BackgroundDatabaseMaintenance) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Circular Logging	Created when circular logging is enabled or disabled for a public folder database. (CircularLoggingEnabled) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Created	Created when a new public folder database is created. For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Custom Server Referral Cost List	Created when the Public Folder Referral setting that specifies to use a custom list of public folder referrals and the associated costs is modified. (CustomReferralServerList) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Deleted Item Retention	Created when the Limits setting that specifies the number of days that deleted items are to be retained in the public folder is modified. (DeletedItemRetention) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Deleted Retention Until Backup	Created when the Limits setting that prevents items from being permanently deleted until after the public folder database is backed up is modified. (RetainDeletedItemsUntilBackup) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - EDB File Path	Created when Exchange database (.edb) file location or file name is modified for a public folder database. For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Event History Retention Period	Created when the length of time that events are to be retained in the event history table is modified. (EventHistoryRetentionPeriod) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Issue Warning At	Created when the Limits setting that specifies whether to automatically warn public folder owners when the public folder is approaching its storage limit is modified. (IssueWarningQuota) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Log Folder Path	Created when the database log file location is modified for a public folder database. For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Maintenance Schedule	Created when the maintenance schedule is modified for a public folder database. (MaintenanceSchedule) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Maximum Item Size	Created when the Limits setting that specifies the maximum size of items that users can post to the public folders in the database is modified. (MaxItemSize) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Mount At Startup	Created when the Mount this database option, which specifies whether to mount the database immediately after it is created, is selected or cleared. (MountAtStartup) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Prohibit Post At	Created when the Limits setting that prevents posting to the public folders in the database after the size of the folder reaches the specified limit is modified. (ProhibitPostQuota) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Referral Costs	Created when the Public Folder Referral setting that specifies to use the cost data from the Active Directory site to compute the connection cost for public folder referrals is modified. (UseCustomReferralServerList) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Removed	Created when a public folder database is removed. For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Renamed	Created when a public folder database is renamed. For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Replication Message Size	Created when the size limit of a replication message is modified. (ReplicationMessageSize) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Replication Period	Created when the time interval associated with the Always Run option is modified. (ReplicationPeriod) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Replication Schedule	Created when the interval at which replication of public folders or content updates may occur is modified. (ReplicationSchedule) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database - Warning Message Schedule	Created when the Limits option that specifies the interval at which warning messages are to be generated is modified. (QuotaNotificationSchedule) For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Public Folder Database Created in Organization	Created when a Public Folders database is created in an Exchange organization. Supported in Exchange 2010 only.	Medium
Public Folder Database Removed from Organization	Created when a Public Folders database is removed from an Exchange organization. Supported in Exchange 2010 only.	Medium
Public Folder Database Renamed in Organization	Created when a Public Folders database is renamed in an Exchange organization. Supported in Exchange 2010 only.	Medium
Receive Connector - Advertise Client Settings	Created when the parameter that specifies whether the SMTP server name, port number, and authentication settings are to be displayed in the Outlook About page is modified. (AdvertiseClientSettings) For more information, see Note 14.	Medium
Receive Connector - Advertise GSSAPI Authentication	Created when the parameter that specifies how to control the advertisement of the Generic Security Services application programming interface (GSSAPI) authentication method is modified. (EnableAuthGSSAPI) For more information, see Note 14.	Medium
Receive Connector - Authentication Methods	Created when the list of authentication mechanisms supported by the Exchange 2010 transport server (AuthMechanism) is modified. For more information, see Note 14.	Medium
Receive Connector - Banner	Created when the Banner parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Bare Line Feed	Created when the BareLinefeedRejectionEnabled parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Binary MIME	Created when the BinaryMimeEnabled parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Chunking	Created when the ChunkingEnabled parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Comment	Created when the Comment parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Connection Inactivity Timeout	Created when the ConnectionInactivityTimeout parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Connection Timeout	Created when the ConnectionTimeout parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Created	Created when a new receive connector is added to a server. For more information, see Note 14.	Medium
Receive Connector - Default Domain	Created when the DefaultDomain parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Delivery Status Notification	Created when the DeliveryStatusNotificationEnabled parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Domain Security	Created when the DomainSecureEnabled parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Eight Bit MIME	Created when the EightBitMimeEnabled parameter is modified.	Medium
Receive Connector - Enabled/Disabled	Created when a receive connector is enabled or disabled. For more information, see Note 14.	Medium
Receive Connector - Enhanced Status Codes	Created when the EnhancedStatusCodesEnabled parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Extended Protection Policy	Created when the ExtendedProtectionPolicy parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Extended Protection TLS Termination At Proxy	Created when the ExtendedProtectionTlsTerminatedAtPolicy parameter is modified. For more information, see Note 14.	Medium
Receive Connector - FQDN Response	Created when the FQDN used as the destination server for connected messaging servers that use the receive connector to send incoming messages is modified. For more information, see Note 14.	Medium
Receive Connector - IP Address Bindings	Created when the local IP address and TCP port numbers used by the receive connector to listen for inbound messages is modified. (Bindings) For more information, see Note 14.	Medium
Receive Connector - Live Credentials	Created when the LiveCredentialsEnabled parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Long Addresses	Created when the LongAddressesEnabled parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Max Acknowledgement Delay	Created when the MaxAcknowledgementDelay parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Max Header Size	Created when the MaxHeaderSize parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Max Hop Count	Created when the MaxHopCount parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Max Inbound Connections	Created when the MaxInboundConnection parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Max Local Hop Count	Created when the MaxLocalHopCount parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Max Logon Failures	Created when the MaxLogonFailures parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Max Message Size	Created when the MaxMessageSize parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Max Protocol Errors	Created when the MaxProtocolErrors parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Max Recipients per Message	Created when the MaxRecipientsPerMessage parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Message Rate Limit	Created when the MessageRateLimit parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Message Rate Source	Created when the MessageRateSource parameter is modified. For more information, see Note 14.	Medium
Receive Connector - ORAR	Created when the parameter that specifies if the Originator Requested Alternate Recipient (ORAR) is supported is modified. (OrarEnabled) For more information, see Note 14.	Medium
Receive Connector - Per Source Max Inbound Connection Percentage	Created when the MaxInboundConnectionPercentagePerSource parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Per Source Max Inbound Connections	Created when the MaxInboundConnectionPerSource parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Permission Groups	Created when the PermissionGroups parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Pipelining	Created when the PipeliningEnabled parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Protocol Logging Level	Created when the ProtocolLoggingLevel parameter is modified. For more information, see Note 14.	Low
Receive Connector - Remote Server IP Addresses	Created when the RemoteIPRanges parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Removed	Created when a receive connector is removed from a server. For more information, see Note 14.	Medium
Receive Connector - Renamed	Created when a receive connector is renamed. For more information, see Note 14.	Medium
Receive Connector - Require EHLO Domain	Created when the RequireEHLODomain parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Require TLS	Created when the RequireTLS parameter is modified. For more information, see Note 14.	Medium
Receive Connector - SIZE SMTP Extension	Created when the SizeEnabled parameter that specifies if the SIZE SMTP extension is supported is modified. For more information, see Note 14.	Medium
Receive Connector - Suppress X Anonymous TLS	Created when the SuppressSAnonymousTls parameter is modified. For more information, see Note 14.	Medium
Receive Connector - Tarpit Interval	Created when the TarpitInterval parameter is modified. For more information, see Note 14.	Medium
Receive Connector - TLS Domain Capabilities	Created when the TlsDomainCapabilities parameter is modified. For more information, see Note 14.	Medium
Receive Connector Added to Server	Created when a Receive connector is added to a server.	Medium
Receive Connector Logging Level Changed On Server	Created when the Logging Level is changed on a Receive connector on a server.	Medium
Receive Connector Removed From Server	Created when a Receive connector is removed from a server.	Medium
Receive Connector Renamed On Server	Created when a Receive connector is renamed on a server.	Medium
Receive Connector Response FQDN Changed On Server	Created when the Response FQDN is changed on a Receive connector on a server.	Medium
Receiving IP Address Changed In Receive Connector	Created when a Receiving IP Address is added or removed from a Receive connector on a server.	Medium
Recording Idle Timeout Changed In UM Dial Plan	Created when the Recording Idle Timeout is changed in the UM Dial Plan.	Medium
Remote Domain - Allow Automatic Forward Enabled/Disabled	Created when the Allow automatic forward option is enabled or disabled. (AutoForwardEnabled) For more information, see Note 14.	Medium
Remote Domain - Allow Automatic Replies Enabled/Disabled	Created when the Allow automatic reply option is enabled or disabled. (AutoReplyEnabled) For more information, see Note 14.	Medium
Remote Domain - Allow Delivery Reports Enabled/Disabled	Created when the Allow delivery reports option is enabled or disabled. (DeliveryReportsEnabled) For more information, see Note 14.	Medium
Remote Domain - Allow Non-Delivery Reports Enabled/Disabled	Created when the Allow non-delivery reports option is enabled or disabled. (NDREnabled) For more information, see Note 14.	Medium
Remote Domain - Content Type	Created when the ContentType parameter that specifies the outbound message content type and formatting is modified. For more information, see Note 14.	Medium
Remote Domain - Created	Created when a new remote domain is created. For more information, see Note 14.	Medium
Remote Domain - Deleted	Created when a remote domain is deleted. For more information, see Note 14.	Medium
Remote Domain - Display Sender’s Name on Messages Enabled/Disabled	Created when the Display sender’s name on messages option is enabled or disabled. (DisplaySenderName) For more information, see Note 14.	Medium
Remote Domain - Exchange Rich-Text Format	Created when the option that specifies whether to send messages that use Exchange rich-text format is modified. For more information, see Note 14.	Medium
Remote Domain - Meeting Forward Notification Enabled/Disabled	Created when the MeetingForwarNotificationEnabled parameter is modified. For more information, see Note 14.	Medium
Remote Domain - Message Line Wrap Column	Created when the Use message text line wrap at column option is changed. (LineWrapSize) For more information, see Note 14.	Medium
Remote Domain - MIME Character Set	Created when the option that specifies acceptable character sets is changed. (CharacterSet) For more information, see Note 14.	Medium
Remote Domain - Non-Delivery Diagnostic Info Enabled/Disabled	Created when the NDRDiagnsoticInfoEnabled parameter is modified. For more information, see Note 14.	Medium
Remote Domain - Non-MIME Character Set	Created when the NonMimeCharacterSet parameter is modified. For more information, see Note 14.	Medium
Remote Domain - Office 365 Tenant Enabled/Disabled	Created when the Use this domain for my Office 365 tenant option is enabled or disabled. For more information, see Note 14.	Medium
Remote Domain - Out-of-Office Message Types Delivered	Created when the option for specifying whether out-of-office messages are to be delivered to the remote domain is modified. (AllowedOOFType) For more information, see Note 14.	Medium
Remote Domain - Recipients Considered Internal	Created when the IsInternal parameter that specifies whether the recipients in the remote domain should be considered internal recipients is modified. For more information, see Note 14.	Medium
Remote Domain - Renamed	Created when a remote domain is renamed. For more information, see Note 14.	Medium
Remote Domain - Trusted Mail Inbound Enabled/Disabled	Created when the TrustedMailInboundEnabled parameter is modified. For more information, see Note 14.	Medium
Remote Domain - Trusted Mail Outbound Enabled/Disabled	Created when the TrustedMailbOutboundEnabled parameter is modified. For more information, see Note 14.	Medium
Remote Domain - Use Simple Display Names Enabled/Disabled	Created when the UseSimpleDisplayName parameter is modified. For more information, see Note 14.	Medium
Remote Domain Definition Added To Hub Transport Configuration	Created when a Remote Domain definition is added to the Organization Hub Transport Configuration.	Medium
Remote Domain Definition Removed From Hub Transport Configuration	Created when a Remote Domain definition is removed from the Organization Hub Transport Configuration.	Medium
Remote Domain Definition Renamed	Created when a Remote Domain definition is renamed.	Medium
Remote IP Address Changed In Receive Connector	Created when a Remote IP Address Range list is changed in a Receive connector on a server.	Medium
Replication Schedule Changed in Public Folders Database	Created when the Replication Schedule is changed for a Public Folders database on an Exchange server.	Medium
Replication Style Changed in Public Folders Database	Created when the Replication Style is changed for a Public Folders database on an Exchange server. Not supported in Exchange 2016.	Medium
Rich Text Format Changed In Remote Domain Definition	Created when the Rich Text Format is changed in a Remote Domain definition.	Medium
Secondary Dialing Method Changed In UM Dial Plan	Created when the Secondary Dialing Method is changed in the UM Dial Plan.	Medium
Send Connector Added To Organization Configuration	Created when a Send connector is added to the Organization Configuration.	Medium
Send Connector Maximum Message Size Changed	Created when the Maximum Message Size for a send connector is changed.	Medium
Send Connector Protocol Logging Changed	Created when the Protocol Logging on a Send connector is changed.	Medium
Send Connector Removed From Organization Configuration	Created when a Send connector is removed from the Organization Configuration.	Medium
Send Connector Renamed	Created when a Send connector is renamed.	Medium
Send Connector Response FQDN Changed	Created when the Response FQDN on a Send connector is changed.	Medium
Send Connector Status Changed	Created when the Status of a Send connector is changed.	Medium
Server Hub Transport - Active User Statistics Log Max Age	Created when the ActiveUserStatisticsLogMaxAge parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Active User Statistics Log Max Directory Size	Created when the ActiveUserStatisticsLogMaxDirectorySize parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Active User Statistics Log Max File Size	Created when the ActiveUserStatisticsLogMaxFileSize parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Active User Statistics Log Path	Created when the ActiveUserStatisticsLogPath parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Anti-Spam Agents Enabled/Disabled	Created when the AntispamAgentsEnabled parameter is modified. For more information, see Note 14. Supported in Exchange 2010 only.	Medium
Server Hub Transport - Connectivity Log Enabled/Disabled	Created when connectivity logging is enabled or disabled on Hub Transport servers. (ConnectivityLogEnabled) For more information, see Note 14.	Medium
Server Hub Transport - Connectivity Log Max Age	Created when the ConnectivityLogMaxAge parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Connectivity Log Max Directory Size	Created when the ConnectivityLogMaxDirectorySize parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Connectivity Log Max File Size	Created when the ConnectivityLogMaxFileSize parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Connectivity Log Path	Created when the location of the connectivity logs is changed. (ConnectivityLogPath) For more information, see Note 14.	Medium
Server Hub Transport - Content Conversion Tracing Enabled/Disabled	Created when content conversion tracing is enabled or disabled. (ContentConversionTracingEnabled) For more information, see Note 14.	Medium
Server Hub Transport - External DNS Adapter	Created when a different network adapter is selected when the Use network card DNS settings is selected on the External DNS Lookups properties tab for a Hub Transport server. (ExternalDNSAdapterEnabled) For more information, see Note 14.	Medium
Server Hub Transport - External DNS Adapter GUID	Created when the ExternalDNSAdapterGuid parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - External DNS Protocol	Created when the ExternalDNSProtocolOption parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - External DNS Servers	Created when an external DNS server is added to the Use these DNS servers list, which identifies the servers to be queried when resolving a remote server. (ExternalDNSServers) For more information, see Note 14.	Medium
Server Hub Transport - External IP Address	Created when the IP address of a previously added DNS server is changed. (ExternalIPAddress) For more information, see Note 14.	Medium
Server Hub Transport - Information Rights Management Log Enabled/Disabled	Created when the Information Rights Management (IRM) transaction logging is enabled or disabled. (IrmLogEnabled) For more information, see Note 14.	Medium
Server Hub Transport - Information Rights Management Log Max Age	Created when the IrmLogMaxAge parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Information Rights Management Log Max Directory Size	Created when the maximum size of all IRM logs in the connectivity log directory is changed. (IrmMaxDirectorySize) For more information, see Note 14.	Medium
Server Hub Transport - Information Rights Management Log Max File Size	Created when the maximum size of each IRM log file is changed. (IrmLogMaxFileSize) For more information, see Note 14.	Medium
Server Hub Transport - Information Rights Management Log Path	Created when the IRM log directory path is modified. (IrmLogPath) For more information, see Note 14.	Medium
Server Hub Transport - Internal DNS Adapter	Created when the InternalDNSAdapterEnabled parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Internal DNS Adapter GUID	Created when the InternalDNSAdapterGuid parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Internal DNS Protocol	Created when the InternalDNSProtocolOption parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Internal DNS Servers	Created when the InternalDNSServers parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Intra-Organization Connector Protocol Log Level	Created when the IntraOrgConnectorProtocolLoggingLevel parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Intra-Organization Connector SMTP Max Messages Per Connection	Created when the IntraOrgConnectorSmtp MessagesPerConnection parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Max Concurrent Mailbox Deliveries	Created when the MaxConcurrentMailboxDeliveries parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Max Concurrent Mailbox Submissions	Created when the MaxConcurrentMailboxSubmissions parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Max Connection Rate Per Minute	Created when the MaxConnectionRatePerMinute parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Maximum Outbound Connections	Created when the Limits property that specifies the maximum number of outgoing connections that can be open at a time is modified. (MaxOutboundConnections) For more information, see Note 14.	Medium
Server Hub Transport - Maximum Outbound Connections Per Domain	Created when the Limits property that specifies the maximum number of concurrent connections to any single domain is modified. (MaxPerDomainOutboundConnections) For more information, see Note 14.	Medium
Server Hub Transport - Message Delayed Notification	Created when the DelayNotificationTimeout parameter is modified. For more information, see Note 14.	Medium
Server Hub Transport - Message Expiration Days	Created when the maximum time that a particular message can remain in the queue is changed. (MessageExpirationTimeout) For more information, see Note 14.	Medium
Server Hub Transport - Message Retry Interval	Created when the retry interval for a message after a connection failure with a remote server is changed. (MessageRetryInterval) For more information, see Note 14.	Medium
Server Hub Transport - Message Tracking Log Enabled/Disabled	Created when message tracking is enabled or disabled. (MessageTrackingLogEnabled) For more information, see Note 14.	Medium
Server Hub Transport - Message Tracking Log Max Age	Created when the message tracking log maximum file age is changed. (MessageTrackingLogMaxAge) For more information, see Note 14.	Medium
Server Hub Transport - Message Tracking Log Max Directory Size	Created when the maximum size of the message tracking log directory is changed. (MessageTrackingLogMaxDirectorySize) For more information, see Note 14.	Medium
Server Hub Transport - Message Tracking Log Max File Size	Created when the maximum size of the message tracking log files is changed. (MessageTrackingLogMaxFileSize) For more information, see Note 14.	Medium
Server Hub Transport - Message Tracking Log Path	Created when the location of the message tracking logs is changed. (MessageTrackingLogPath) For more information, see Note 14.	Medium
Server Hub Transport - Message Tracking Log Subject Logging Enabled/Disabled	Created when the parameter that specifies whether the message subject is to be included in the message tracking log is modified. (MessageTrackingLogSubjectLoggingEnabled) For more information, see Note 14.	Medium
Server Hub Transport - Outbound Connection Failure Retry Interval	Created when the Outbound connection failure retry interval (minutes) is modified. (OutboundConnectionFailureRetryInterval) For more information, see Note 14.	Medium
Server Hub Transport - Pickup Directory Max Header Size	Created when the maximum message header size that can be submitted to the Pickup directory is changed. (PickupDirectoryMaxHeaderSize) For more information, see Note 14.	Medium
Server Hub Transport - Pickup Directory Max Messages Per Minute	Created when the maximum number of messages processed per minute by the Pickup and Replay directories is changed. (PickupDirectoryMaxMessagesPerMinute) For more information, see Note 14.	Medium
Server Hub Transport - Pickup Directory Max Recipients Per Message	Created when the maximum number of recipients that can be included on a e-mail message is changed. (PickupDirectoryMaxRecipientsPerMessage) For more information, see Note 14.	Medium
Server Hub Transport - Pickup Directory Path	Created when the location of the Pickup directory is changed. (PickupDirectoryPath) For more information, see Note 14.	Medium
Server Hub Transport - Pipeline Tracing Enabled/Disabled	Created when pipeline tracking is enabled or disabled. (PipelineTrackingEnabled) For more information, see Note 14.	Medium
Server Hub Transport - Pipeline Tracing Path	Created when the location of the pipeline tracking logs is changed. (PipelineTrackingPath) For more information, see Note 14.	Medium
Server Hub Transport - Pipeline Tracing Sender Address	Created when the sender e-mail address that invokes pipeline tracking is changed. (PipelineTrackingSenderAddress) For more information, see Note 14.	Medium
Server Hub Transport - Poison Message Detection Enabled/Disabled	Created when the parameter that specifies whether poison messages should be detected is changed. (PoisonMessageDetectionEnabled) For more information, see Note 14.	Medium
Server Hub Transport - Poison Message Threshold	Created when the number of times a message can be rejected before it is considered a poison message is changed. (PoisonThreshold) For more information, see Note 14.	Medium
Server Hub Transport - Queue Max Idle Time	Created when the parameter that specifies the amount of time an empty mailbox queue (delivery or remote) can exist before the queue is removed is changed. (QueueMaxIdleTime) For more information, see Note 14.	Medium
Server Hub Transport - Receive Protocol Log Max Age	Created when the maximum age of the Receive connector protocol log file is changed. (ReceiveProtocolLogMaxAge) For more information, see Note 14.	Medium
Server Hub Transport - Receive Protocol Log Max Directory Size	Created when the maximum size of the Receive connector protocol log directory is changed. (ReceiveProtocolLogMaxDirectorySize) For more information, see Note 14.	Medium
Server Hub Transport - Receive Protocol Log Max File Size	Created when the maximum size of the Receive connector protocol log files is changed. (ReceiveProtocolLogMaxFiles) For more information, see Note 14.	Medium
Server Hub Transport - Receive Protocol Log Path	Created when the location of the Receive connector protocol logs is changed. (ReceiveProtocolLogPath) For more information, see Note 14.	Medium
Server Hub Transport - Recipient Validation Cache Enabled/ Disabled	Created when the parameter that specifies whether the recipient address used by transport agents are to be cached is enabled or disabled. (RecipientValidationCacheEnabled) For more information, see Note 14.	Medium
Server Hub Transport - Replay Directory Path	Created when the path of the Replay directory is changed. (ReplayDirectoryPath) For more information, see Note 14.	Medium
Server Hub Transport - Root Drop Directory Path	Created when the top-level location of the Drop directory is changed. (RootDropDirectoryPath) For more information, see Note 14.	Medium
Server Hub Transport - Routing Table Log Max Age	Created when the maximum routing table log age is changed. (RoutingTableLogMaxAge) For more information, see Note 14.	Medium
Server Hub Transport - Routing Table Log Max Directory Size	Created when the maximum size of the routing table log directory is changed. (RoutingTableLogMaxDirectorySize) For more information, see Note 14.	Medium
Server Hub Transport - Routing Table Log Path	Created when the directory location for the routing table log file is changed. (RoutingTableLogPath) For more information, see Note 14.	Medium
Server Hub Transport - Send Protocol Log Max Age	Created when the maximum age for the Send connector protocol log file is changed. (SendProtocolLogMaxAge) For more information, see Note 14.	Medium
Server Hub Transport - Send Protocol Log Max Directory Size	Created when the maximum size of the Send connector protocol log directory is changed. (SendProtocolLogMaxDirectorySize) For more information, see Note 14.	Medium
Server Hub Transport - Send Protocol Log Max File Size	Created when the maximum size of the shared Send connector protocol log files is changed. (SendProtocolLogMaxFileSize) For more information, see Note 14.	Medium
Server Hub Transport - Send Protocol Log Path	Created when the location of the Send connector protocol logs is changed. (SendProtocolLogPath) For more information, see Note 14.	Medium
Server Hub Transport - Server Statistics Log Max Age	Created when the maximum duration that the server statistics log files are kept is changed. (ServerStatisticsLogMaxAge) For more information, see Note 14.	Medium
Server Hub Transport - Server Statistics Log Max Directory Size	Created when the maximum size of the server statistics log directory is changed. (ServerStatisticsLogMaxDirectorySize) For more information, see Note 14.	Medium
Server Hub Transport - Server Statistics Log Max File Size	Created when the maximum file size for the server statistics log files is changed. (ServerStatisticsLogMaxFileSize) For more information, see Note 14.	Medium
Server Hub Transport - Server Statistics Log Path	Created when the location of the server statistics log storage is changed. (ServerStatisticsLogPath) For more information, see Note 14.	Medium
Server Hub Transport - Transient Failure Retry Attempts	Created when the Transient failure retry attempts property is modified. (TransientFailureRetryCount) For more information, see Note 14.	Medium
Server Hub Transport - Transient Failure Retry Interval	Created when the Transient failure retry interval (seconds) property is modified. (TransientFailureRetryInterval) For more information, see Note 14.	Medium
Server Hub Transport - Use Downgraded Exchange Server Authentication	Created when the UseDowngradeExchangeServerAuth parameter is modified. For more information, see Note 14.	Medium
Sharing Policy - Created	Created when a sharing policy is created in an Exchange organization. For more information, see Note 14.	Medium
Sharing Policy - Default	Created when the Default parameter that specifies whether a sharing policy is the default for all mailboxes is changed. For more information, see Note 14.	Medium
Sharing Policy - Domains	Created when the Domains parameter that specifies the domains to which the sharing policy applies and the sharing policy actions are changed. For more information, see Note 14.	Medium
Sharing Policy - Enabled/Disabled	Created when a Sharing Policy Enabled setting is changed in an Exchange organization. For more information, see Note 14.	Medium
Sharing Policy - Removed	Created when a Sharing Policy is removed from an Exchange organization. For more information, see Note 14.	Medium
Sharing Policy - Renamed	Created when a Sharing Policy is renamed in an Exchange organization. For more information, see Note 14.	Medium
Sharing Policy Added	Created when Sharing Policy is added to an Exchange organization.	Medium
Sharing Policy Default Setting Changed	Created when a Sharing Policy Default setting is changed in an Exchange organization.	Medium
Sharing Policy Domains Setting Changed	Created when a Sharing Policy Domains setting is changed in an Exchange organization.	Medium
Sharing Policy Enabled Setting Changed	Created when a Sharing Policy Enabled setting is changed in an Exchange organization.	Medium
Sharing Policy Removed	Created when a Sharing Policy is removed from an Exchange organization.	Medium
Sharing Policy Renamed	Created when a Sharing Policy is renamed in an Exchange organization.	Medium
Smart Host Added To Send Connector	Created when Smart Host is added to a Send connector.	Medium
Smart Host Authentication Settings Changed on Send Connector	Created when the Smart Host security settings are changed on a Send connector.	Medium
Smart Host Removed From Send Connector	Created when Smart Host is removed from a Send connector.	Medium
Source Server Added To Send Connector	Created when a Source Server is added to a Send connector.	Medium
Source Server Removed From Send Connector	Created when a Source Server is removed from a Send connector.	Medium
Speech-Enabled Option Changed for UM Auto Attendant	Created when the Speech-Enabled option is changed on the UM Auto Attendant.	Medium
Subscriber Access Number Added To UM Dial Plan	Created when a subscriber Access Number is added to the UM Dial Plan.	Medium
Subscriber Access Number Removed From UM Dial Plan	Created when a subscriber Access Number is removed from the UM Dial Plan.	Medium
This Database Can Be Overwritten By a Restore Changed for Mailbox Database	Created when the This Database Can Be Overwritten By a Restore setting is changed for a Mailbox database.	Medium
Time Zone Changed for UM Auto Attendant	Created when the Time Zone is changed on the UM Auto Attendant.	Medium
TLS Authentication Option changed on Receive Connector	Created when the TLS Authentication option is changed on a Receive connector on a server.	Medium
Transport Dumpster Maximum Retention Time Setting Changed	Created when the Maximum Retention time (days) setting is changed for a transport dumpster.	Medium
Transport Dumpster Maximum Size Per Mailbox Database Setting Changed	Created when the Maximum Size Per Mailbox Database (MB) setting is changed for a transport dumpster.	Medium
Transport Rule Added To Organization Configuration	Created when the Transport Rule is added to the Organization Configuration.	Medium
Transport Rule Changed	Created when the Transport Rule is changed.	Medium
Transport Rule Priority Changed	Created when the priority of a Transport Rule is changed.	Medium
Transport Rule Removed From Organization Configuration	Created when the Transport Rule is removed from the Organization Configuration.	Medium
Transport Rule Renamed	Created when the Transport Rule is renamed.	Medium
UM Auto Attendant Added To Organization Configuration	Created when the UM Auto Attendant is added to the Organization Configuration.	Medium
UM Auto Attendant Removed From Organization Configuration	Created when the UM Auto Attendant is removed from the Organization Configuration.	Medium
UM Auto Attendant Renamed	Created when the UM Auto Attendant is renamed in the Organization Configuration.	Medium
UM Auto Attendant Status Changed	Created when the Enabled status has changed for the UM Auto Attendant.	Medium
UM Dial Plan - Access Telephone Numbers	Created when the list of valid voice mail pilot numbers is modified. (AccessTelephoneNumbers) For more information, see Note 14.	Medium
UM Dial Plan - Allow Calling Line ID Resolution via Active Directory	Created when the parameter that specifies whether to allow calling line ID resolution using telephone number fields that may be configured in Active Directory is modified. (AllowHeuristicADCallingLineIdResolution) For more information, see Note 14.	Medium
UM Dial Plan - Allow Calls to Extensions	Created when the parameter that specifies whether to allow calls to dial plan extensions is modified. (AllowExtensions) For more information, see Note 14.	Medium
UM Dial Plan - Allow Calls to Users Within Same Dial Plan	Created when the parameter that specifies whether to let subscribers dial numbers that resolve to a subscriber within the same dial plan is modified. (AllowDialPlanSubscribers) For more information, see Note 14.	Medium
UM Dial Plan - Allowed In-Country/Region Rule Groups	Created when the list of in-country/region names from the same dial group that can be dialed is modified. (AllowedInCountryOrRegionGroups) For more information, see Note 14.	Medium
UM Dial Plan - Allowed International Rule Groups	Created when the list of international dial group names allowed is modified. (AllowedInternationalGroups) For more information, see Note 14.	Medium
UM Dial Plan - Audio Codec	Created when the audio codec (e.g., MP3) used for recording is modified. (AudioCodec) For more information, see Note 14.	Medium
UM Dial Plan - Automatic Speech Recognition Enabled/Disabled	Created when Automatic Speech Recognition (ASR) is enabled or disabled for users who are members of the dial plan. (AutomaticSpeechRecognitionEnabled) For more information, see Note 14.	Medium
UM Dial Plan - Call Answering Rules Enabled/Disabled	Created when the parameter that specifies whether Call Answering Rules are enabled for UM-enabled users that are associated with the UM dial plan is modified. (CallAnsweringRulesEnabled) For more information, see Note 14.	Medium
UM Dial Plan - Callers Can Connect	Created when the Callers can connect option is modified. For more information, see Note 14.	Medium
UM Dial Plan - Callers Can Contact Address List	Created when the defined custom address list is modified. For more information, see Note 14.	Medium
UM Dial Plan - Callers Can Contact Auto Attendant	Created when the defined auto attendant is modified. For more information, see Note 14.	Medium
UM Dial Plan - Callers Can Contact Extension	Created when the defined extension number is modified. For more information, see Note 14.	Medium
UM Dial Plan - Callers Can Contact Recipient List	Created when the defined recipient container used for directory searches is modified. For more information, see Note 14.	Medium
UM Dial Plan - Country/Region Code	Created when the country or region code that precedes a telephone number is modified. (CountryOrRegionCode) For more information, see Note 14.	Medium
UM Dial Plan - Created	Created when a new Unified Messaging (UM) dial plan is created. For more information, see Note 14.	Medium
UM Dial Plan - Default Language	Created when the default language of the system is modified. (DefaultLanguage) For more information, see Note 14.	Medium
UM Dial Plan - Default Outbound Calling Line ID	Created when the phone number that a UM server uses as the calling line ID when placing an outbound call is modified. (DefaultOutboundCallingLineId) For more information, see Note 14.	Medium
UM Dial Plan - Dial By Name Primary Method	Created when the parameter that specifies that the Dial by Name lookup key is to be created from the specified source is modified. (DialByNamePrimary) For more information, see Note 14.	Medium
UM Dial Plan - Dial By Name Secondary Method	Created when the parameter that specifies that the secondary Dial by Name lookup key is to be created from the specified source is modified. (DialByNameSecondary) For more information, see Note 14.	Medium
UM Dial Plan - Equivalent Dial Plans	Created when the parameter that specifies the name of an equivalency dial plan is modified. (EquivalentDialPhoneContexts) For more information, see Note 14.	Medium
UM Dial Plan - Fax Enabled/Disabled	Created when parameter that specifies whether the UM servers associated with the dial plan will answer and process incoming fax calls is modified. (FaxEnabled) For more information, see Note 14.	Medium
UM Dial Plan - In-Country/Region Number Format	Created when the prefix string to use and the number of digits to take from the directory is changed. (InCountryOrRegionNumberFormat) For more information, see Note 14.	Medium
UM Dial Plan - In-Country/Region Rule Groups	Created when the in-country groups that can be used by the UM dial plan is modified. For more information, see Note 14.	Medium
UM Dial Plan - Informational Announcement	Created when an informational announcement is enabled or disabled. (InfoAnnoucementEnabled) For more information, see Note 14.	Medium
UM Dial Plan - Informational Announcement File	Created when the audio file name for an informational announcement is modified. (InfoAnnouncementFilename) For more information, see Note 14.	Medium
UM Dial Plan - Input Failures Before Disconnect	Created when the number of sequential user input errors allowed before the call is disconnected is modified. (InputFailuresBeforeDisconnect) For more information, see Note 14.	Medium
UM Dial Plan - International Access Code	Created when the code that precedes a telephone number to dial international calls is modified. (InternationalAccessCode) For more information, see Note 14.	Medium
UM Dial Plan - International Number Format	Created when the prefix string to use and the number of digits to take from the directory, when dialing into this dial plan from a different country code is modified. (InternationalNumberFormat) For more information, see Note 14.	Medium
UM Dial Plan - International Rule Groups	Created when the international groups that can be used by the UM dial plan is modified. For more information, see Note 14.	Medium
UM Dial Plan - Logon Failures Before Disconnect	Created when the parameter that specifies the number of sequential unsuccessful logon attempts that can be made before a call is disconnected is modified. (LogonFailuresBeforeDisconnect) For more information, see Note 14.	Medium
UM Dial Plan - Matched Name Selection Method	Created when the parameter that specifies the selection to be used to differentiate between users who have names that match the touch tone or speech input is modified. (MatchedNameSelectionMethod) For more information, see Note 14.	Medium
UM Dial Plan - Maximum Call Duration	Created when the maximum length of time that a call can last before it is interrupted and the call is dropped is modified. (MailCallDuration) For more information, see Note 14.	Medium
UM Dial Plan - Maximum Recording Duration	Created when the maximum length of time that messages can be recorded is modified. (MaxRecordingDuration) For more information, see Note 14.	Medium
UM Dial Plan - National Number Prefix	Created when the dialing code that precedes a telephone number when placing calls form one local area to another within a specific country or region is modified. (NationalNumberPrefix) For more information, see Note 14.	Medium
UM Dial Plan - Numbering Plan Formats	Created when a phone number mask used for resolving caller ID to named of users in Active Directory is modified. (NumberingPlansFormats) For more information, see Note 14.	Medium
UM Dial Plan - Operator Extension	Created when the extension number of the operator is modified. (OperatorExtension) For more information, see Note 14.	Medium
UM Dial Plan - Outside Line Access Code	Created when the code (a.k.a. trunk access code) that precedes a telephone number to dial an external in-country telephone number is modified. (OutsideLineAccessCode) For more information, see Note 14.	Medium
UM Dial Plan - Pilot Numbers	Created when the pilot numbers configured on the dial plan are modified. (PilotIdentifierList) For more information, see Note 14.	Medium
UM Dial Plan - Recording Idle Time-out	Created when the parameter that specifies the length of time that a caller can be silent when recording a voice message before the recording is ended is modified. (RecordingIdleTimeout) For more information, see Note 14.	Medium
UM Dial Plan - Removed	Created when the UM Dial Plan is removed from the Organization Configuration. For more information, see Note 14.	Medium
UM Dial Plan - Send Voice Messages Enabled/Disabled	Created when the Send Message feature is enabled or disabled. (SendVoiceMsgEnabled) For more information, see Note 14.	Medium
UM Dial Plan - Telephone User Interface Prompt Editing	Created when the parameter that specifies whether authorized users are permitted to record prompts using the Telephone User Interface (TUI) is enabled or disabled. (TUIPromptEditingEnabled) For more information, see Note 14.	Medium
UM Dial Plan - Transfer to Users Enabled/Disabled	Created when the option to allow callers to transfer to users is enabled or disabled. (AllowDialPlanSubscribers) For more information, see Note 14.	Medium
UM Dial Plan - VOIP Security	Created when the parameter that specifies whether Voice over IP (VOIP) traffic is encrypted is modified. (VoIPSecurity) For more information, see Note 14.	Medium
UM Dial Plan - Welcome Greeting	Created when a custom welcome greeting is enabled or disabled. (WelcomeGreetingEnabled) For more information, see Note 14.	Medium
UM Dial Plan - Welcome Greeting Filename	Created when the audio file name used for the welcome greeting is modified. (WelcomeGreetingFilename) For more information, see Note 14.	Medium
UM Dial Plan Added To Organization Configuration	Created when the UM Dial Plan is added to the Organization Configuration.	Medium
UM Dial Plan Removed From Organization Configuration	Created when the UM Dial Plan is removed from the Organization Configuration.	Medium
UM Dial Plan Renamed	Created when the UM Dial Plan is renamed.	Medium
UM IP Gateway Added To Organization Configuration	Created when the UM IP Gateway is added to the Organization Configuration.	Medium
UM IP Gateway Removed From Organization Configuration	Created when the UM IP Gateway is removed from the Organization Configuration.	Medium
UM IP Gateway Renamed	Created when the UM IP Gateway is renamed.	Medium
UM IP Gateway Status Changed	Created when the Enabled status is changed for the UM IP Gateway.	Medium
UM Mailbox Policy Added To Organization Configuration	Created when the UM Mailbox Policy is added to the Organization Configuration.	Medium
UM Mailbox Policy Removed From Organization Configuration	Created when the UM Mailbox Policy is removed from the Organization Configuration.	Medium
UM Mailbox Policy Renamed	Created when the UM Mailbox Policy is renamed.	Medium
UM Server - Dial Plans	Created when the parameter that specifies all the dial plans for which a server will handle UM calls is modified. For more information, see Note 14.	Medium
UM Server - External Host FQDN	Created when the external FQDN or host name of a UM server is modified. For more information, see Note 14.	Medium
UM Server - External Service FQDN	Created when the FQDN or host name of a load balancer servicing UM servers is modified. For more information, see Note 14.	Medium
UM Server - Grammar Generation Schedule	Created when the parameter that specifies the scheduled times to start speech grammar generation is modified. For more information, see Note 14.	Medium
UM Server - IRM Log Max Age	Created when the parameter that specifies the maximum age for an Information Rights Management (IRM) log file is modified on a UM server. For more information, see Note 14.	Medium
UM Server - IRM Log Max Directory Size	Created when the parameter that specifies the maximum size of all IRM logs in the connectivity log directory is modified on a UM server. For more information, see Note 14.	Medium
UM Server - IRM Log Max File Size	Created when the parameter that specifies the maximum file size for a single IRM log file is modified on a UM server. For more information, see Note 14.	Medium
UM Server - IRM Log Path	Created when the IRM log location is modified on a UM server. For more information, see Note 14.	Medium
UM Server - IRM Logging Enable/Disable	Created when IRM logging is enabled or disabled on a UM server. For more information, see Note 14.	Medium
UM Server - Max Calls Allowed	Created when the parameter that specifies the maximum number of concurrent voice calls that the UM server allows is modified. For more information, see Note 14.	Medium
UM Server - SIP Access Service	Created when the FQDN and TCP port of Office Communications Server A/V Edge servers that are used for inbound or outbound calls from remote users that are located outside the network is modified. For more information, see Note 14.	Medium
UM Server - SIP TCP Listen Port	Created when the Transmission Control Protocol (TCP) port used by the UM server to receive incoming calls is modified. For more information, see Note 14.	Medium
UM Server - SIP TLS Listen Port	Created when the Transport Layer Security (TLS) port used by the UM server to receive incoming calls is modified. For more information, see Note 14.	Medium
UM Server - Startup Mode	Created when startup up mode for the UM server is changed: TCP, TLS or Dual. For more information, see Note 14.	Medium
UM Server - Status	Created when the UM server status is changed: Enabled, Disabled or NoNewCalls. For more information, see Note 14.	Medium
Use DNS MX Records To Route Mail Option Changed	Created when the Use DNS MX Records To Route Mail option is changed on a Send connector.	Medium
Virtual Directory Added To Offline Address Book Distribution	Created when the Virtual Directory is added to the Web-Based Distribution List for an Offline Address Book.	Medium
Virtual Directory Removed From Offline Address Book Distribution	Created when the Virtual Directory is removed from the Web-Based Distribution List for an Offline Address Book.	Medium
Voice Message Text Changed In UM Mailbox Policy	Created when the Voice Message text is changed in the UM Mailbox Policy.	Medium
Warning Message Interval Changed for Mailbox Database	Created when the Warning Message Interval is changed for a Mailbox database in an Exchange Server.	Medium
Warning Message Interval Changed in Public Folders Database	Created when the Warning Message Interval is changed for a Public Folders database on an Exchange server.	Medium

Exchange Permission Tracking

Table 6. Exchange Permission Tracking events
Event	Description	Severity
Active Directory Object - Access Rights Changed	Created when the access rights of an Active Directory object is modified. For more information, see Note 14.	High
Active Directory Object - Extended Rights Changed	Created when the rights of an Active Directory object is extended in order to perform an operation, such as changing ‘Send As...’ rights for a user object. For more information, see Note 14.	High
Active Directory Object - Owner Changed	Created when the owner of an Active Directory object is modified. For more information, see Note 14.	High

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Change Auditor for Exchange 7.1.1 - Event Reference Guide

Exchange Distribution List

Exchange Mailbox Monitoring

Exchange Organization

Exchange Permission Tracking