Microsoft 365 Defender

[StandAloneFighter]

I have a microsoft 365 organisation account PixelPowerTech.onmicrosoft.com

 

i need help with a feature in security.microsoft.com

 

In "Emails & collaborations" in "Submissions" i am trying to "Turn on auditing

 

 

After clicking on "Turn on auditing" i get the following windows:

 

 

After clicking on "OK" i am informed promted with the folloing message:

 

 

After clicking "Yes" i get the following error message

 

 

After clikcking "OK" i get a message telling me im unable to do this

 

 

Has anyone else experiance the same issue? If so how did you resolve it? i have tried to contact microsoft support many times now with no luck finding a solution. i tried reading the offical microsoft documentation with no luck "https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/manage-tenant-allows?view=o365-worldwide"

 

Does anyone know any spacifit moicrosoft contact numbers or email addresses or anyone that works at microsoft that can help me? Their default contact number 0344 800 2400 is usless

 

 

 

[Radium_Angel]

IIRC Auditing is reserved for domain-connected systems.

[StandAloneFighter]

i didnt fully understand the asrnswer

[Guest]

On 12/23/2021 at 3:44 AM, Radium_Angel said:

IIRC Auditing is reserved for domain-connected systems.

No - by default Microsoft 365 tenancies are created as ‘dehydrated’, basically to save on space. Hence certain features are missing or disabled. 
 

@standalone9111 connect to Exchange Online PowerShell, execute the below and wait 24 hours:

 

Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $true

 

if you’re still running into an issue in the GUI and the below returns True, contact Microsoft via the admin portal (admin.microsoft.com)

 Get-AdminAuditLogConfig | FL UnifiedAuditLogIngestionEnabled

 

[StandAloneFighter]

Thank you  I will give the solution a try today!

[Guest]

10 hours ago, StandAloneFighter said:

Thank you  I will give the solution a try today!

All good - is this a personal project or something for business? If for business, I'd suggest working with an MS partner as the out of the box config for 365 is very basic and a lot of things need to be manually enabled.