Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.


In a Microsoft Exchange Server 2016 environment, consider the following scenario:

  • You have a mailbox that has mailbox audit logging enabled.

  • You do a grouped operation (for example, that you delete multiple messages at one time would be audited).

  • You run the Search-MailboxAuditLog –ShowDetails cmdlet on the mailbox.

In this situation, you may not see all the messages that are included within the grouped operation in mailbox audit logs.


This issue occurs because the indexing of audit entry isn't correctly handled.


For Exchange Server 2016, install Cumulative Update 9 or a later cumulative update for Exchange Server 2016.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.


Learn about the terminology that Microsoft uses to describe software updates.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!