One of the audit tasks that you may need to do while your operation on exchange server is how to find out by whom and when an Exchange Object was Created, Modified, or deleted mainly for troubleshooting purposes.

You can easily do that using exchange management shell:

Search-AdminAuditLog -ObjectIds “ObjectName” –StartDate  (date) –EndDate (date)

Note: The ObjectIds parameter accepts a variety of objects, such as mailbox aliases, Send connector names, and so on. If you want to specify more than one object ID, separate each ID with a comma for a more fine-grained report.

Happy Searching!!!