Description:
Verifies that every user mailbox has mailbox auditing enabled and includes the CIS-required Owner, Delegate and Admin audit actions.
Why:
Ensure every user mailbox has mailbox auditing enabled and includes the CIS-required Owner, Delegate, and Admin audit actions.
Status detail shown in Augmentt: N of M user mailboxes are missing required mailbox audit configuration.
This check reports a count rather than a simple pass/fail. It is Configured when every in-scope item is compliant, Partially Configured when some are, and Not Configured when none are.
Scoring: Scored proportionally — the check contributes according to how many of the in-scope items are compliant, so a partially compliant tenant earns partial credit.
Category: Exchange
Microsoft Licensing: Works with Basic licensing
Secure Score Impact: YES — Microsoft publishes the improvement action "Ensure mailbox auditing for all users is enabled".
Remediation in Augmentt: Configure directly in Augmentt (Configure tab); Guided remediation steps (Instructions tab)
Compliance Frameworks:
CIS Microsoft 365 Benchmark v6 (Level 1) — 6.1.2
CIS Controls v8 — 8.2
Microsoft documentation:
