M365 | KC's Blog https://www.kjctech.net Wed, 26 Jun 2024 06:04:08 +0000 en-US hourly 1 https://i0.wp.com/www.kjctech.net/wp-content/uploads/2016/12/cropped-KC-Logo.png?fit=32%2C32&ssl=1 M365 | KC's Blog https://www.kjctech.net 32 32 24634607 Audit Email Deletion in Microsoft 365 https://www.kjctech.net/audit-email-deletion-in-microsoft-365/?utm_source=rss&utm_medium=rss&utm_campaign=audit-email-deletion-in-microsoft-365 https://www.kjctech.net/audit-email-deletion-in-microsoft-365/#respond Wed, 26 Jun 2024 06:04:05 +0000 https://www.kjctech.net/?p=5188 If you use a shared mailbox and sometimes wonder who deleted some of the emails from the inbox, you can search the audit log to find out. Before you go any further, check if you have turned on the Audit Log Search in your tenant first. Get-AdminAuditLogConfig | Format-List UnifiedAuditLogIngestionEnabled If you haven’t, do this to turn it on. Set-AdminAuditLogConfig […]

The post Audit Email Deletion in Microsoft 365 first appeared on KC's Blog.]]> If you use a shared mailbox and sometimes wonder who deleted some of the emails from the inbox, you can search the audit log to find out.

Before you go any further, check if you have turned on the Audit Log Search in your tenant first.

Get-AdminAuditLogConfig | Format-List UnifiedAuditLogIngestionEnabled

If you haven’t, do this to turn it on.

Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $true

To do the search, you can either go through the Compliance Portal or use the PowerShell cmdlet.

  1. Sign into the Compliance Portal
  2. Go to the Audit tab on the left panel
  3. Select the New Search tab at the top of the Audit page.

Then configure the search criteria as applicable. It took me some time to figure it out and then a few tries to get my result.

Check details on how to perform the search here.

Obviously, as always, using PowerShell cmdlets or scripts makes things much easier. Check out this script from Microsoft to get started on how it works. But if you like a more powerful script that works out of the box. Give this a serious look.

For example, I used it to check if any email deletions were happening after May 30, 2024 from a mailbox called overtime.

./auditdeleteemails.ps1 -mailbox "overtime" -StartDate 05/30/2024

It saves the result in a CSV file for you to review.

The post Audit Email Deletion in Microsoft 365 first appeared on KC's Blog.]]> https://www.kjctech.net/audit-email-deletion-in-microsoft-365/feed/ 0 5188 Options to Send Emails using Microsoft 365 https://www.kjctech.net/options-to-send-emails-using-microsoft-365/?utm_source=rss&utm_medium=rss&utm_campaign=options-to-send-emails-using-microsoft-365 https://www.kjctech.net/options-to-send-emails-using-microsoft-365/#respond Mon, 25 Mar 2024 06:04:45 +0000 https://www.kjctech.net/?p=5151 This is how to send emails from an app or device not named Outlook through the Microsoft 365 network. According to Mail Flow Best Practices, there are 3 options available. SMTP Auth If you can deal with Modern Authentication in the form of OAuth, this option provides you with the most reliable email delivery. And you do need a licensed […]

The post Options to Send Emails using Microsoft 365 first appeared on KC's Blog.]]> This is how to send emails from an app or device not named Outlook through the Microsoft 365 network. According to Mail Flow Best Practices, there are 3 options available.

  • SMTP Auth
  • Direct Send
  • SMTP relay

SMTP Auth

If you can deal with Modern Authentication in the form of OAuth, this option provides you with the most reliable email delivery. And you do need a licensed mailbox to send emails from.

Server/smart hostsmtp.office365.com
PortPort 587 (recommended) or port 25
TLS/StartTLSEnabled
Username/email address and passwordEnter the sign-in credentials of the hosted mailbox being used

Direct Send

Direct Send doesn’t require SMTP Auth, nor a licensed mailbox. All you need is to specify your own MX endpoint as the mail server or smart host with an unblocked Port 25, you are all set to send emails to recipients in your own organization. Adding an SPF record to avoid having the message flagged as spam is recommended but not required.

v=spf1 ip4: include:spf.protection.outlook.com ~all
Server/smart hostYour MX endpoint, for example, contoso-com.mail.protection.outlook.com
PortPort 25
TLS/StartTLSOptional
Email addressAny email address for one of your Microsoft 365 or Office 365 accepted domains. This email address doesn’t need to have a mailbox.

SMTP Relay

If you need to send emails to external recipients, or not every device on your network has Port 25 open or allowed, SMTP Replay could be your answer. The basic setup is the same as the Direct Send but you do need to set up a Mail Flow connector first, whether it’s certificate-based or IP-based.

Obviously, an IP-based connector is much easier.

Connector settingValue
FromYour organization’s email server
ToMicrosoft 365 or Office 365
Domain restrictions: IP address/rangeYour on-premises IP address or address range that the device or application will use to connect to Microsoft 365 or Office 365
Device or application settingValue
Server/smart hostYour MX endpoint, for example, yourdomain– com.mail.protection.outlook.com
PortPort 25
TLS/StartTLSEnabled
Email addressAny email address in one of your Microsoft 365- or Office 365-verified domains. This email address doesn’t need a mailbox.

And again, SPF is highly recommended to avoid your messages being trapped in the spam folder.

The post Options to Send Emails using Microsoft 365 first appeared on KC's Blog.]]> https://www.kjctech.net/options-to-send-emails-using-microsoft-365/feed/ 0 5151