Overview

Introduction

Welcome to the Configuring and Using Auditing Practice Lab. In this module, you will be provided with the instructions and devices needed to develop your hands-on skills.

Learning Outcomes

In this module, you will complete the following exercises:

  • Exercise 1 - Managing Mailbox Audit Logging
  • Exercise 2 - Managing Admin Audit Logging

After completing this lab, you will be able to:

  • Configure mailbox and admin audit logging
  • Perform the mailbox actions to be logged
  • View the mailbox and admin audit logs

Exam Objectives

The following exam objective is covered in this lab:

  • 5.5 Plan, manage and use mailbox and administrative auditing

Lab Duration

It will take approximately 1 hour to complete this lab.

Exercise 1 - Managing Mailbox Audit Logging

The mailboxes in an organization contain critical, sensitive, and high value data. As an administrator, it is very important for you to safeguard the mailbox data. The data should not be compromised, leaked, stolen, or damaged at any cost. You need to keep a track of all the actions or operations that are targeted at the mailboxes.

The feature of mailbox audit logging enables you to monitor and audit the mailbox actions. Each mailbox action is ideally logged and audited. However, you can specify the actions that need to be logged for specific users. The mailbox audit logs are generated and stored in the Recoverable Items folder. The log entries are retained in the mailbox for a default period of 90 days. After the default period, the entries are deleted. You can search the mailbox audit logs, retrieve, and view the required information.

In this exercise, you will learn how to manage the mailbox audit logging feature by performing the following tasks:

  • Task 1 - Configure mailbox audit logging
  • Task 2 - Perform mailbox actions to be logged
  • Task 3 - View mailbox audit logs

Learning Outcomes

After completing this exercise, you will be able to:

  • Configure mailbox audit logging
  • Perform the mailbox actions to be logged
  • View the mailbox audit logs

Exercise 2 - Managing Admin Audit Logging

The admin audit logging feature of Exchange Server enables you to keep a track of the changes done by administrators or users on the mailbox server. The changes are logged and audited. Basically, the admin audit logging feature audits the cmdlets that are executed in the Exchange Management Shell. The changes in the mailboxes are done with the help of cmdlets. Therefore, the cmdlets are audited to know the type of changes done in an Exchange organization. The admin audit logging is enabled by default in Exchange Server.

There are cmdlets available to configure the admin audit logging feature in the Exchange Management Shell. The admin audit log entries are generated whenever a cmdlet is executed. These entries are stored in the admin audit log and can be viewed.

In this exercise, you will learn how to manage the admin audit logging feature by performing the following tasks:

  • Task 1 - Configure admin audit logging
  • Task 2 - View admin audit logs

Learning Outcomes

After completing this exercise, you will be able to:

  • Configure admin audit logging
  • View the admin audit logs

Comprehensive Learning

See the full benefits of our immersive learning experience with interactive courses and guided career paths.