Message ID: MC982553
We will retire the Search-MailboxAuditLog and New-MailboxAuditLogSearch cmdlets in Microsoft Exchange Online starting March 1, 2025, and completing in late March 2025. After the retirement, new records will be written to Search-UnifiedAuditLog and Search-MailboxAuditLog will be accessible only as a historical record.
[How this will affect your organization:]
After the retirement, admins will be able to access Search-MailboxAuditLog and New-MailboxAuditlogSearch and make changes and downloads until late June 2025. After late June, Search-MailboxAuditLog and New-MailboxAuditlogSearch will become a static record only, and admins will no longer be able to make changes and downloads.
[What you need to do to prepare:]
This change will happen automatically by the specified dates. Please notify your users about this change, update your relevant documentation, and share the alternate capability Search-UnifiedAuditLog.
To use the Search-UnifiedAuditLog cmdlet, you must ensure auditing is enabled for your tenant.
Learn more about enabling auditing for your tenant and about the changes to these cmdlets: Microsoft Exchange Online: Search-MailboxAuditLog and New-MailboxAuditLogSearch will retire | Microsoft Community Hub
Source: Microsoft
Latest Posts
- (Updated) Microsoft Copilot Chat: AI disclaimer updates [MC1181766]
![(Updated) Microsoft Copilot Chat: AI disclaimer updates [MC1181766] 2 pexels olly 840996](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
 - Microsoft SharePoint: eSignature now available in Türkiye [MC1182690]
![Microsoft SharePoint: eSignature now available in Türkiye [MC1182690] 3 pexels felixmittermeier 957040](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
 - Microsoft Teams Rooms: Front-of-room view control for Town Halls on Android [MC1182706]
![Microsoft Teams Rooms: Front-of-room view control for Town Halls on Android [MC1182706] 4 pexels pixabay 460775](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
 - Microsoft 365 Copilot for Admins – Teams admin center skills are now generally available [MC1182708]
![Microsoft 365 Copilot for Admins - Teams admin center skills are now generally available [MC1182708] 5 pexels scottwebb 1029612](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
 
![Microsoft Exchange Online: Search-MailboxAuditLog and New-MailboxAuditLogSearch will retire [MC982553] 1 Microsoft Exchange Online: Search-MailboxAuditLog and New-MailboxAuditLogSearch will retire [MC982553]](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-picjumbo-com-55570-196666-1024x683.webp)
![(Updated) Microsoft Copilot Chat: AI disclaimer updates [MC1181766] 2 pexels olly 840996](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-olly-840996-150x150.webp)
![Microsoft SharePoint: eSignature now available in Türkiye [MC1182690] 3 pexels felixmittermeier 957040](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-felixmittermeier-957040-150x150.webp)
![Microsoft Teams Rooms: Front-of-room view control for Town Halls on Android [MC1182706] 4 pexels pixabay 460775](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-pixabay-460775-150x150.webp)
![Microsoft 365 Copilot for Admins - Teams admin center skills are now generally available [MC1182708] 5 pexels scottwebb 1029612](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-scottwebb-1029612-150x150.webp)
 ![Microsoft Teams: Updates to iPad Calendar week views [MC982564] 7 Microsoft Teams: Updates to iPad Calendar week views [MC982564]](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-eye4dtail-134525-150x150.webp)
The upcoming retirement of the Search-MailboxAuditLog and New-MailboxAuditLogSearch cmdlets in Microsoft Exchange Online, set to begin on March 1, 2025, is certainly a noteworthy change for both admins and users alike. While this transition may initially seem daunting, it also brings with it a chance for a more streamlined approach to mailbox auditing.
For admins, the impact will be twofold. First, there’s the immediate task of ensuring that users are informed about the changes and that documentation is updated accordingly. This might feel like an extra chore in an already busy schedule, but hey, consider it a chance to flex those communication muscles! After all, who doesn’t love a good memo? Secondly, admins will need to embrace the Search-UnifiedAuditLog cmdlet, which, while requiring some adjustments, ultimately offers a more comprehensive view of audit logs across the organization. This means less time juggling multiple cmdlets and more time enjoying that well-deserved coffee break.
For users, the effect will be less about the technicalities and more about the assurance that their mailbox activities are still being monitored effectively, albeit through a different method. The transition to a unified audit log should enhance their experience by providing a more cohesive overview of activities, making it easier to track any changes or actions taken.
As for the overall impact, it is likely to be significant but manageable with proper preparation. The key will be communication and education; if everyone is on the same page, the transition can be as smooth as butter on a warm English muffin.
In conclusion, while change can be uncomfortable, it often paves the way for improvement. So, let’s embrace the new cmdlet with open arms and a sense of humor. After all, every challenge is just an opportunity wearing a different outfit!
What do you think about these changes? How do you feel they will impact your workflow? I’d love to hear your thoughts in the comments below! For more insights and updates, don’t forget to check out additional posts at mwpro.co.uk.