Commands › Exchange Online

Get-MailboxAuditBypassAssociation

Exchange Online ExchangeOnlineManagement Get-*

Retrieve information about the AuditBypassEnabled property value for user accounts (on-premises Exchange and the cloud) and computer accounts (on-premises Exchange only). You use the Set-MailboxAuditBypassAssociation cmdlet to enable this property to bypass mailbox audit logging.

Quick start script

# Get-MailboxAuditBypassAssociation — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-MailboxAuditBypassAssociation | Format-List

# 3. Export for evidence / drift tracking
Get-MailboxAuditBypassAssociation | Export-Clixml .\MailboxAuditBypassAssociation-$(Get-Date -Format yyyyMMdd).xml

Syntax

Get-MailboxAuditBypassAssociation [[-Identity] <MailboxAuditBypassAssociationIdParameter>]
 [-DomainController <Fqdn>]
 [-ResultSize <Unlimited>]
 [<CommonParameters>]

Parameters (3)

Parameter	Type	What it controls
-Identity	MailboxAuditBypassAssociationIdParameter	The Identity parameter specifies the user account or computer account where you want to view the value of the AuditBypassEnabled property.
-DomainController	Fqdn	This parameter is available only in on-premises Exchange.
-ResultSize	Unlimited	The ResultSize parameter specifies the maximum number of results to return. If you want to return all requests that match the query, use unlimited for the value of this parameter. The default value is 1000.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.