Exchange Issues Event: 5136

Event ID 5136 – Mailbox property changes

Event ID 5136:

This Exchange event indicates that a particular mailbox object or property was modified. This event is displayed only when the object’s audit policy enables logging the change performed by the users. However, this event ID does not log creation, deletion, restoration and object move actions. Exchange Reporter Plus gives you complete details about all the activities performed by users on a particular mailbox. It is your one-stop audit solution to track all mailbox property changes and other user activities.

About Exchange Reporter Plus:

Exchange Reporter Plus is a reporting, monitoring and change auditing tool for Exchange servers, Exchange Online and Skype for Business servers. It offers separate reports on mailbox move operation, mailbox activation, deactivation, quota changes, size restriction changes and more. The object creation and deletion operations are also tracked using the advanced auditing functionality.

Steps to generate mailbox properties reports:

1. Go to the Audit tab on the top pane.
2. Navigate to the Advanced Audit > Admin Audit Log. Category.
3. Select a suitable report as required.
4. Enter the period for report generation.
5. Select the type of view for the report (Summary, Default, or Custom View).

Highlights of using Exchange Reporter Plus:

• Schedule reports to get regular updates about various Exchange objects.
• Export reports in any of the 4 formats: HTML, CSV, PDF and XLS.
• Add or remove columns from the report and customize them as and when you require.
• Use the advanced filter options to generate and scrutinise the reports further.
• Customise alert profiles to get immediate SMS or email notifications.
• Add new actions that you want to audit apart from the pre-defined ones.