

You can use the “ Run a non-owner mailbox access report” or “ Export mailbox audit logs” options. You can also search audit logs in Compliance Management -> Auditing of the Exchange Admin Center (EAC). It causes less load on the mailbox server, runs in the background, allows you to find the information you want among thousands of events effectively, and sends results to the specified mailbox. To perform an asynchronous search for audit events, the New-MailboxAuditLogSearch cmdlet is used. Get-Mailbox -ResultSize Unlimited -Filter |ft MailboxOwnerUPN, LogonType,LogonUserDisplayName,Operation, OperationResult,SourceItemSubjectsList,FolderPathName, DestFolderPathName,LastAccessed|ft Or for all mailboxes in your Exchange organization: You can enable audit logging for a single mailbox: $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri -Authentication Kerberos -Credential $UserCredential Connect to your on-prem Exchange Server using PowerShell:
