Correct Answer:
Explanation/Reference:
Explanation:
* Set-Mailbox
Enabling and Configuring Mailbox Auditing
Mailbox auditing isn’t enabled by default, so the first thing you need to do is enable auditing for the mailboxes for which you need to collect data. You need to use the Set-Mailbox cmdlet. For example, this command enables auditing for the mailbox named CEO Mailbox:
Set-Mailbox -Identity ‘CEO Mailbox’ -AuditEnabled $True
* New-MailboxAuditLogSearch
Getting Auditing Data for Heavily Loaded Servers
It’s easy to retrieve auditing data for lightly loaded servers, but it can be quite a different matter for heavily loaded servers, where auditing is enabled on many mailboxes. Exchange provides the New-MailboxAuditLogSearch cmdlet for this purpose.
Running New-MailboxAuditLogSearch forces Exchange to execute a background search and return the results in the form of an XML-formatted attachment that’s emailed to the specified recipients. Take, for example, the following command:
New-Mailbox-AuditLogSearch `
-Name "Check for Delegated Sends" `
-LogonTypes Delegate `
-StartDate ‘1/1/2012’ -EndDate ‘2/1/2012’ `
-StatusMailRecipients [email protected]
Reference: Mailbox Auditing in Exchange Server 2010
http://windowsitpro.com/exchange-server-2010/mailbox-auditing-exchange-server-2010
