Hey Guys, 

I am trying to figure out when a users mailbox had OOF enabled. I am searching through the admin audit log and am seeing entries, however all results return with an ObjectModified that is blank. 

Is this expected? Why would that value be blank? If a user set his/her own AutoReply that persons object modified value is display correctly. 

set-searchadminauditlog -startdate “04/03/2024” -enddate “04/19/2024” -cmdlets set-mailboxautoreplyconfiguration 

When searching for other cmdlets like set-mailbox, or new-mailbox etc those return a value for ObjectModified. 

So i dont get it. 

​Hey Guys,  I am trying to figure out when a users mailbox had OOF enabled. I am searching through the admin audit log and am seeing entries, however all results return with an ObjectModified that is blank.  Is this expected? Why would that value be blank? If a user set his/her own AutoReply that persons object modified value is display correctly.  set-searchadminauditlog -startdate “04/03/2024” -enddate “04/19/2024” -cmdlets set-mailboxautoreplyconfiguration  When searching for other cmdlets like set-mailbox, or new-mailbox etc those return a value for ObjectModified.  So i dont get it.   Read More

​