Applies to: Exchange Server 2013
Topic Last Modified: 2012-10-14
When you enable mailbox audit logging for a mailbox, specified mailbox access events (for example, accessing a folder or a message, or permanently deleting a message) are logged. However, access by some authorized accounts, such as accounts used by third-party tools or accounts used for lawful monitoring, can create a large number of mailbox audit log entries and may not be of interest to your organization.
You can configure a user or computer account to bypass mailbox audit logging, so actions taken by that user or account for any mailbox aren't logged. By bypassing trusted user or computer accounts that need frequent access to mailboxes, you can reduce the noise in mailbox audit logs.
|If you use mailbox audit logging to audit mailbox access and actions, you must monitor mailbox audit bypass associations at regular intervals. If a mailbox audit bypass association is added for an account, the account can access any mailbox in the organization to which it has been assigned permissions, without any mailbox audit logging entries being generated for such access or any actions taken (such as message deletions).|
For additional management tasks related to mailbox audit logging, see Mailbox Audit Logging Procedures.
What do you need to know before you begin?
- Estimated time to complete: 1 minute.
- You need to be assigned permissions before you can perform this
procedure or procedures. To see what permissions you need, see the
"Mailbox audit logging" entry in the Messaging Policy and
Compliance Permissions topic.
- When an account is configured to bypass mailbox audit logging,
access to any mailbox by that account won't be logged. You can't
configure an account to bypass the logging of access to a specific
- You can't use the Exchange Administration Center (EAC) to
enable or disable mailbox audit logging bypass for an account. You
must use the Shell.
- For information about keyboard shortcuts that may apply to the
procedures in this topic, see Keyboard Shortcuts in
the Exchange Admin Center.