Exchange2016 Auditing and Quarantine question

Question

Hello everyone ,

first of all I am sorry if this has been answered before but I really could not find the answer or

similar topic.

I have a big issue that persists over some years but I left it because I did not need that functionality,

but know I really need it.

I have 4 Exchange server 2016 , with more than 5000 users. And I live in a country where people have multiple nationality.

I have all servers set up to the last CU and SU .

The Problem is as following :

I needed to set up the audit on Exchange , and sadly it does not work like intended . If you put in a parameter you get an empty answer . If you put in the Command Search-AdminAuditLog whitout parameter it is working to an extend.

So I researched this issue and saw that a fix is there with a CU , but this didnt solve the problem as I was up to date. So I had to do the recommended work around , with the regional settings. https://learn.microsoft.com/en-us/exchange/troubleshoot/compliance/search-adminauditlog-mailboxauditlog-return-no-result

With this the admin audit search worked but I got another big problem with this. And this issue I could not see it at any other place documented.

The Users on the several Exchange servers got put their mailbox into Quarantine (not all users).

So when an user send an email to an person that was affected got an reply that the message could not be delivered, because the inbox is in quarantine.
Upon further investigation I found out that the users had a common setting in the regional / local settings EN-150 .

Taking an user out of it , makes him go in after a while automatically.

And I had to revert the changes I did with the configuration of the regional settings on the servers , so that the users do not get quarantined anymore.

But now I still cannot do any audit search.

So I desperately need help in this regard if possible please.

Thanks a lot in Advance

Best Regards

Answer 1

Hello

Thank you for posting in Microsoft Community forum.

Based on the description, I understand your question is related to Exchange.

Since there are no engineers dedicated to this topic in this forum. in order to be able to get a quick and effective handling of your issue, I recommend that you repost your question in the Q&A forum, where there will be a dedicated engineer to give you a professional and effective reply.

Here is the link for Q&A forum.

Questions - Microsoft Q&A

Click the "Ask a Question" button in the upper right corner to post your question and select any tags related to your productions.

Thank you for your understanding and support. If you have any question or concern, please feel free to let us know.

Have a nice day.

Best Regards,

Molly

Answer 2

Thank you very much . I will do that.

Answer 3

You're welcome!