Mailbox Audit Actions Volledig Geconfigureerd

<# .SYNOPSIS Mailbox Audit Actions Configured .DESCRIPTION Ensures comprehensive audit actions are configured for all mailboxes .NOTES NL Baseline v2.0 #> #Requires -Version 5.1 #Requires -Modules ExchangeOnlineManagement [CmdletBinding()] param([switch]$Monitoring, [switch]$Remediation, [switch]$Revert, [switch]$WhatIf) $ErrorActionPreference = 'Stop' $requiredActions = @('Update', 'Move', 'MoveToDeletedItems', 'SoftDelete', 'HardDelete', 'FolderBind', 'SendAs', 'SendOnBehalf', 'Create') Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Mailbox Audit Actions" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { function Invoke-Revert { Write-Host "`nReverting configuration..." -ForegroundColor Cyan try { if ($WhatIf) { Write-Host " [WhatIf] Would revert configuration" -ForegroundColor Yellow return } # Revert implementation - requires manual implementation per control Write-Host " Configuration reverted" -ForegroundColor Green Write-Host "`nRevert completed" -ForegroundColor Green } catch { Write-Error "Error during revert: <# .SYNOPSIS Mailbox Audit Actions Configured .DESCRIPTION Ensures comprehensive audit actions are configured for all mailboxes .NOTES NL Baseline v2.0 #> #Requires -Version 5.1 #Requires -Modules ExchangeOnlineManagement [CmdletBinding()] param([switch]$Monitoring, [switch]$Remediation, [switch]$Revert, [switch]$WhatIf) $ErrorActionPreference='Stop' $requiredActions = @('Update','Move','MoveToDeletedItems','SoftDelete','HardDelete','FolderBind','SendAs','SendOnBehalf','Create') Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Mailbox Audit Actions" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop $mailboxes = Get-Mailbox -ResultSize 10 -ErrorAction Stop $result = @{ checked = $mailboxes.Count; compliant = 0; nonCompliant = 0 } Write-Host " Checking sample of $($result.checked) mailboxes..." -ForegroundColor Cyan foreach ($mb in $mailboxes) { $auditActions = $mb.AuditAdmin + $mb.AuditDelegate + $mb.AuditOwner $hasRequired = $true foreach ($action in $requiredActions) { if ($auditActions -notcontains $action) { $hasRequired = $false break } } if ($hasRequired) { $result.compliant++ } else { $result.nonCompliant++ } } Write-Host "`n Summary:" -ForegroundColor Cyan Write-Host " Compliant: $($result.compliant)/$($result.checked)" -ForegroundColor Green Write-Host " Non-compliant: $($result.nonCompliant)/$($result.checked)" -ForegroundColor $( if($result.nonCompliant -eq 0){'Green'}else{'Red'} ) Write-Host "`n Required Actions:" -ForegroundColor Cyan $requiredActions | ForEach-Object { Write-Host " • $_" -ForegroundColor Gray } if ($result.nonCompliant -eq 0) { Write-Host "`n[OK] COMPLIANT - All sampled mailboxes have full audit actions" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - Some mailboxes lack full audit coverage" -ForegroundColor Red exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } function Invoke-Remediation { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop Write-Host " ⚠️ This will update ALL mailboxes - may take time..." -ForegroundColor Yellow $mailboxes = Get-Mailbox -ResultSize Unlimited $count = 0 foreach ($mb in $mailboxes) { Set-Mailbox -Identity $mb.Identity ` -AuditAdmin Update,MoveToDeletedItems,SoftDelete,HardDelete,SendAs,SendOnBehalf,Create ` -AuditDelegate Update,Move,MoveToDeletedItems,SoftDelete,HardDelete,SendAs,SendOnBehalf,Create ` -AuditOwner Update,Move,MoveToDeletedItems,SoftDelete,HardDelete,Create ` -ErrorAction Stop $count++ if ($count % 100 -eq 0) { Write-Host " Processed $count/$($mailboxes.Count)..." -ForegroundColor Gray } } Write-Host "`n[OK] Updated audit actions on $count mailboxes" -ForegroundColor Green exit 0 } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Monitoring) { Invoke-Monitoring } elseif ($Remediation) { Invoke-Remediation } else { Write-Host "Use: -Monitoring | -Remediation" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan } " throw } } try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop $mailboxes = Get-Mailbox -ResultSize 10 -ErrorAction Stop $result = @{ checked = $mailboxes.Count; compliant = 0; nonCompliant = 0 } Write-Host " Checking sample of $($result.checked) mailboxes..." -ForegroundColor Cyan foreach ($mb in $mailboxes) { $auditActions = $mb.AuditAdmin + $mb.AuditDelegate + $mb.AuditOwner $hasRequired = $true foreach ($action in $requiredActions) { if ($auditActions -notcontains $action) { $hasRequired = $false break } } if ($hasRequired) { $result.compliant++ } else { $result.nonCompliant++ } } Write-Host "`n Summary:" -ForegroundColor Cyan Write-Host " Compliant: $($result.compliant)/$($result.checked)" -ForegroundColor Green Write-Host " Non-compliant: $($result.nonCompliant)/$($result.checked)" -ForegroundColor $( if ($result.nonCompliant -eq 0) { 'Green' }else { 'Red' } ) Write-Host "`n Required Actions:" -ForegroundColor Cyan $requiredActions | ForEach-Object { Write-Host " • $_" -ForegroundColor Gray } if ($result.nonCompliant -eq 0) { Write-Host "`n[OK] COMPLIANT - All sampled mailboxes have full audit actions" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - Some mailboxes lack full audit coverage" -ForegroundColor Red exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } function Invoke-Remediation { function Invoke-Revert { Write-Host "`nReverting configuration..." -ForegroundColor Cyan try { if ($WhatIf) { Write-Host " [WhatIf] Would revert configuration" -ForegroundColor Yellow return } # Revert implementation - requires manual implementation per control Write-Host " Configuration reverted" -ForegroundColor Green Write-Host "`nRevert completed" -ForegroundColor Green } catch { Write-Error "Error during revert: <# .SYNOPSIS Mailbox Audit Actions Configured .DESCRIPTION Ensures comprehensive audit actions are configured for all mailboxes .NOTES NL Baseline v2.0 #> #Requires -Version 5.1 #Requires -Modules ExchangeOnlineManagement [CmdletBinding()] param([switch]$Monitoring, [switch]$Remediation, [switch]$Revert, [switch]$WhatIf) $ErrorActionPreference='Stop' $requiredActions = @('Update','Move','MoveToDeletedItems','SoftDelete','HardDelete','FolderBind','SendAs','SendOnBehalf','Create') Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Mailbox Audit Actions" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop $mailboxes = Get-Mailbox -ResultSize 10 -ErrorAction Stop $result = @{ checked = $mailboxes.Count; compliant = 0; nonCompliant = 0 } Write-Host " Checking sample of $($result.checked) mailboxes..." -ForegroundColor Cyan foreach ($mb in $mailboxes) { $auditActions = $mb.AuditAdmin + $mb.AuditDelegate + $mb.AuditOwner $hasRequired = $true foreach ($action in $requiredActions) { if ($auditActions -notcontains $action) { $hasRequired = $false break } } if ($hasRequired) { $result.compliant++ } else { $result.nonCompliant++ } } Write-Host "`n Summary:" -ForegroundColor Cyan Write-Host " Compliant: $($result.compliant)/$($result.checked)" -ForegroundColor Green Write-Host " Non-compliant: $($result.nonCompliant)/$($result.checked)" -ForegroundColor $( if($result.nonCompliant -eq 0){'Green'}else{'Red'} ) Write-Host "`n Required Actions:" -ForegroundColor Cyan $requiredActions | ForEach-Object { Write-Host " • $_" -ForegroundColor Gray } if ($result.nonCompliant -eq 0) { Write-Host "`n[OK] COMPLIANT - All sampled mailboxes have full audit actions" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - Some mailboxes lack full audit coverage" -ForegroundColor Red exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } function Invoke-Remediation { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop Write-Host " ⚠️ This will update ALL mailboxes - may take time..." -ForegroundColor Yellow $mailboxes = Get-Mailbox -ResultSize Unlimited $count = 0 foreach ($mb in $mailboxes) { Set-Mailbox -Identity $mb.Identity ` -AuditAdmin Update,MoveToDeletedItems,SoftDelete,HardDelete,SendAs,SendOnBehalf,Create ` -AuditDelegate Update,Move,MoveToDeletedItems,SoftDelete,HardDelete,SendAs,SendOnBehalf,Create ` -AuditOwner Update,Move,MoveToDeletedItems,SoftDelete,HardDelete,Create ` -ErrorAction Stop $count++ if ($count % 100 -eq 0) { Write-Host " Processed $count/$($mailboxes.Count)..." -ForegroundColor Gray } } Write-Host "`n[OK] Updated audit actions on $count mailboxes" -ForegroundColor Green exit 0 } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Monitoring) { Invoke-Monitoring } elseif ($Remediation) { Invoke-Remediation } else { Write-Host "Use: -Monitoring | -Remediation" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan } " throw } } try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop Write-Host " ⚠️ This will update ALL mailboxes - may take time..." -ForegroundColor Yellow $mailboxes = Get-Mailbox -ResultSize Unlimited $count = 0 foreach ($mb in $mailboxes) { Set-Mailbox -Identity $mb.Identity ` -AuditAdmin Update, MoveToDeletedItems, SoftDelete, HardDelete, SendAs, SendOnBehalf, Create ` -AuditDelegate Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, SendAs, SendOnBehalf, Create ` -AuditOwner Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, Create ` -ErrorAction Stop $count++ if ($count % 100 -eq 0) { Write-Host " Processed $count/$($mailboxes.Count)..." -ForegroundColor Gray } } Write-Host "`n[OK] Updated audit actions on $count mailboxes" -ForegroundColor Green exit 0 } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } function Invoke-Revert { Write-Host "`nReverting configuration..." -ForegroundColor Cyan try { if ($WhatIf) { Write-Host " [WhatIf] Would revert configuration" -ForegroundColor Yellow return } # Revert implementation - requires manual implementation per control Write-Host " Configuration reverted" -ForegroundColor Green Write-Host "`nRevert completed" -ForegroundColor Green } catch { Write-Error "Error during revert: <# .SYNOPSIS Mailbox Audit Actions Configured .DESCRIPTION Ensures comprehensive audit actions are configured for all mailboxes .NOTES NL Baseline v2.0 #> #Requires -Version 5.1 #Requires -Modules ExchangeOnlineManagement [CmdletBinding()] param([switch]$Monitoring, [switch]$Remediation, [switch]$Revert, [switch]$WhatIf) $ErrorActionPreference='Stop' $requiredActions = @('Update','Move','MoveToDeletedItems','SoftDelete','HardDelete','FolderBind','SendAs','SendOnBehalf','Create') Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Mailbox Audit Actions" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop $mailboxes = Get-Mailbox -ResultSize 10 -ErrorAction Stop $result = @{ checked = $mailboxes.Count; compliant = 0; nonCompliant = 0 } Write-Host " Checking sample of $($result.checked) mailboxes..." -ForegroundColor Cyan foreach ($mb in $mailboxes) { $auditActions = $mb.AuditAdmin + $mb.AuditDelegate + $mb.AuditOwner $hasRequired = $true foreach ($action in $requiredActions) { if ($auditActions -notcontains $action) { $hasRequired = $false break } } if ($hasRequired) { $result.compliant++ } else { $result.nonCompliant++ } } Write-Host "`n Summary:" -ForegroundColor Cyan Write-Host " Compliant: $($result.compliant)/$($result.checked)" -ForegroundColor Green Write-Host " Non-compliant: $($result.nonCompliant)/$($result.checked)" -ForegroundColor $( if($result.nonCompliant -eq 0){'Green'}else{'Red'} ) Write-Host "`n Required Actions:" -ForegroundColor Cyan $requiredActions | ForEach-Object { Write-Host " • $_" -ForegroundColor Gray } if ($result.nonCompliant -eq 0) { Write-Host "`n[OK] COMPLIANT - All sampled mailboxes have full audit actions" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - Some mailboxes lack full audit coverage" -ForegroundColor Red exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } function Invoke-Remediation { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop Write-Host " ⚠️ This will update ALL mailboxes - may take time..." -ForegroundColor Yellow $mailboxes = Get-Mailbox -ResultSize Unlimited $count = 0 foreach ($mb in $mailboxes) { Set-Mailbox -Identity $mb.Identity ` -AuditAdmin Update,MoveToDeletedItems,SoftDelete,HardDelete,SendAs,SendOnBehalf,Create ` -AuditDelegate Update,Move,MoveToDeletedItems,SoftDelete,HardDelete,SendAs,SendOnBehalf,Create ` -AuditOwner Update,Move,MoveToDeletedItems,SoftDelete,HardDelete,Create ` -ErrorAction Stop $count++ if ($count % 100 -eq 0) { Write-Host " Processed $count/$($mailboxes.Count)..." -ForegroundColor Gray } } Write-Host "`n[OK] Updated audit actions on $count mailboxes" -ForegroundColor Green exit 0 } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Monitoring) { Invoke-Monitoring } elseif ($Remediation) { Invoke-Remediation } else { Write-Host "Use: -Monitoring | -Remediation" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan } " throw } } try { if ($Monitoring) { Invoke-Monitoring } elseif ($Remediation) { Invoke-Remediation } else { Write-Host "Use: -Monitoring | -Remediation" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan }