Any advice on a self service way of having managers access mailbox from terminated employees?
Greetings, I'm looking for some advice on a challenge we are facing with accessing mailboxes from terminated users. Currently, we have some managers who need access to terminated employees' emails for valid business reasons, and our current process involves exporting PSTs from eDiscovery, which can be time-consuming and cumbersome. Moreover, once we pass the PST to the requestor, we lose control of it, which is not ideal because it's not subject to retention policies. We've considered creating a shared mailbox, importing the PST there, and giving access to the requestor, but that takes too long and involves too many parties in the process (exporting the PST, legal team, creating the shared folder, X team, giving access to said shared mailbox, eventually removing it, Y team, etc.). I would like to know if there is a self-service way for approved employees to access mailboxes from terminated users (users that no longer exist in Active Directory and are only available in eDiscovery). Any insights or advice you can provide would be greatly appreciated. Thank you in advance for your help.
MCAS: Create Item Impersonated activity
Hi Community! Found this activity on one of our users "Create Item (Impersonated)" in Exchange Online. Been looking for a description for this but this is what I found: https://docs.microsoft.com/en-us/cloud-app-security/activity-filters-queries Is this caused by Mailbox Delegation in Exchange Online? If yes what activity triggered this? Would like to know a much detailed description for this activity. Thank you!
No Admin Access for Office 365 Exchange Online via Cloud App Security
No Admin Access for Office 365 Exchange Online via Cloud App Security we are experiencing a bug in the conditional access setup for Office 365 Exchange Online App being 'monitor only' by Cloud App Security. it won't allow you to log in and hit the /ecp (admin) site. it always takes you to /owa (admin mailbox). this was working for months, has started to fail recently. if i remove the app from the conditional access policy it works fine. ticket # 18027527
