使用屏幕阅读器在 Exchange 管理中心中运行审核报告Use a screen reader to run an audit report in the Exchange admin center

您可以通过在 Exchange Online 的 Exchange 管理中心 (EAC) 中使用屏幕阅读器来运行审核报告并搜索审核信息。某些审核报告可以通过跟踪管理员作出的特定更改帮助您解决配置问题。其他审核报告可以帮助您监测法规、合规性以及诉讼要求。You can run audit reports and search for audit information by using your screen reader in the Exchange admin center (EAC) in Exchange Online. Certain audit reports can help you troubleshoot configuration issues by tracking specific changes made by administrators. Other audit reports can help you monitor regulatory, compliance, and litigation requirements.

本主题内容In this topic

入门Get started

使用 Internet Explorer 和键盘快捷方式进行导航,并确保您具有在 EAC 中操作所需的适当 Office 365 订阅和管理角色。然后,打开 EAC 并开始操作。Navigate with Internet Explorer and keyboard shortcuts, and make sure that you have the appropriate Office 365 subscription and admin role to work in the EAC. Then, open the EAC and get started.

使用浏览器和键盘在 EAC 中导航Use your browser and keyboard to navigate in the EAC

Exchange Online 包括 EAC,是一个基于 Web 的应用程序,因此键盘快捷方式和导航的使用可能与在 Exchange 2016 中有差异。Exchange 管理中心的辅助功能Exchange Online, which includes the EAC, is a web-based application, so the keyboard shortcuts and navigation may be different from those in Exchange 2016. Accessibility in the Exchange admin center.

为了获得最佳效果,在 Exchange Online 的 EAC 中操作时,请使用 Internet Explorer 作为浏览器。详细了解 Internet Explorer 键盘快捷键For best results when working in the EAC in Exchange Online, use Internet Explorer as your browser. Learn more about Internet Explorer keyboard shortcuts.

EAC 中的许多任务都需要使用弹出窗口。因此,请务必在浏览器中为 Office 365 启用弹出窗口Many tasks in the EAC require the use of pop-up windows so, in your browser, be sure to enable pop-up windows for Office 365.

确认您的 Office 365 订阅计划Confirm your Office 365 subscription plan

若要详细了解你的订阅计划中的 Exchange Online 功能,请参阅我拥有哪些 Office 365 商业版产品或许可证?Exchange Online 服务说明For more information about the Exchange Online capabilities in your subscription plan, go to What Office 365 business product or license do I have? and Exchange Online Service Description..

打开 EAC 并确认您的管理员角色Open the EAC, and confirm your admin role

若要审核报告,使用屏幕阅读器打开 Exchange 管理中心并确认您的 Office 365 全局管理员已将您分配到组织管理和记录管理管理员角色组。若要运行就地电子数据展示或就地保留报告,请确认您已被分配到发现管理角色组。了解如何使用屏幕阅读器在 Exchange 管理中心确定您的管理员角色To run audit reports, Use a screen reader to open the Exchange admin center and check that your Office 365 global administrator has assigned you to the Organization Management and Records Management admin role groups. To run In-Place eDiscovery or In-Place Hold reports, check that you are assigned to the Discovery Management role group. Learn how to Use a screen reader to identify your admin role in the Exchange admin center.

查看数据以解决配置和安全问题Find data to troubleshoot configuration and security issues

通过检查非所有者访问邮箱的记录信息、Exchange Online 配置更改和管理员角色组更新来解决配置问题。此信息可在 合规性管理 选项卡和 EAC 的 审核 页面上获取。Troubleshoot configuration issues by examining logged information about mailbox access by non-owners, Exchange Online configuration changes, and administrator role group updates. This information is available on the Compliance Management tab and the Auditing page of the EAC.

搜索非所有者邮箱访问Search for non-owner mailbox access

启用邮箱的 Exchange 邮箱审核后,只要非所有者的用户访问该邮箱,就会在邮箱审核日志中记录相关信息。每个日志项目都包括邮箱访问者和执行操作的相关信息。需要解决潜在的安全问题时,请搜索非所有者邮箱访问。When Exchange mailbox auditing is enabled for a mailbox, information is recorded in the mailbox audit log whenever a user other than the owner accesses that mailbox. Each log entry includes information about who accessed the mailbox and what actions were performed. Search for non-owner mailbox access when you need to troubleshoot possible security issues.

备注

你或者其他管理员必须先在远程 Windows PowerShell 中启用邮箱审核记录才能搜索非所有者邮箱访问。了解有关运行非所有者邮箱访问报告的详细信息Before you can search for non-owner mailbox access, you or another Admin must enable mailbox audit logging, which is done in the Remote Windows PowerShell. Learn more about running a non-owner mailbox access report.

  1. 在 EAC 中,按 Ctrl+F6,直到主导航窗格具有焦点而且听到"仪表板,主导航链接"。In the EAC, press Ctrl+F6 until the primary navigation pane has the focus and you hear "Dashboard, Primary navigation link."

  2. 按 Tab 键移到 合规性管理 ,然后按 Enter。Tab to compliance management and press Enter.

  3. 若要移到菜单栏,请按 Ctrl+F6。To move to the menu bar, press Ctrl+F6.

  4. 按 Tab 键移到 审核 。您会听到"审核,辅助导航链接"。按 Enter。Tab to auditing. You hear "Auditing, Secondary navigation link." Press Enter.

  5. 若要访问主窗口列表视图,请按 Ctrl+F6。您会听到"审核报告"。To access the main window list view, press Ctrl+F6. You hear "Audit reports."

  6. 大约按 Tab 键三次,直到您听到"运行非所有者邮箱访问报告"。按 Enter。Press the Tab key about three times until you hear "Run a non-owner mailbox access report." Press Enter.

    1. 在打开的 搜索非所有者访问过的邮箱 对话框中, 开始日期年份 组合框具有焦点,并且听到"开始日期年份组合框"。In the Search for Mailboxes Accessed by Non-Owners dialog box which opens, the Start date year combo box has the focus, and you hear "Year of Start date combo box."

      提示

      默认情况下,开始日期设置为昨天日期之前的两周。启用后,邮箱审核日志通常将条目存储 90 天。By default, the start date is set to two weeks before yesterday's date. When enabled, the mailbox audit log typically stores entries for 90 days.

  7. 如有必要,键入管理员配置更改搜索的开始日期年份。您还可以通过按向上箭头键或向下箭头键选择开始日期年份。If necessary, type the start date year for your administrator configuration change search. You can also select the start date year by pressing the Up Arrow key or the Down Arrow key.

  8. 按 Tab 键移到 文本框,然后键入或选择开始日期月份。Tab to the month text box, and type or select the start date month.

  9. 按 Tab 键移到 文本框,然后键入或选择开始日期日。Tab to the day text box, and type or select the start date day.

  10. 按 Tab 键移到 结束日期年份 组合框。您会听到"结束日期年份组合框"。Tab to the End date year combo box. You hear "Year of End date combo box."

    提示

    默认结束日期为当天日期。The default end date is today's date.

  11. 如有必要,键入管理员配置更改搜索的结束日期年份。您还可以通过按向上箭头键或向下箭头键选择结束日期年份。If necessary, type the end date year for your administrator configuration change search. You can also select the end date year by pressing the Up Arrow key or the Down Arrow key.

  12. 按 Tab 键移到 文本框,然后键入或选择结束日期月份。Tab to the month text box, and type or select the end date month.

  13. 按 Tab 键移到 文本框,然后键入或选择结束日期日。Tab to the day text box, and type or select the end date day.

  14. 按 Tab 键以访问 搜索 按钮,然后按 Enter。Press the Tab key to access the search button, and press Enter.

    提示

    如果您想要搜索非所有者访问的所有邮箱,请不要选择任何特定邮箱,然后转至步骤 10。当 搜索这些邮箱 框为空时,搜索将包括所有邮箱。If you want to search all mailboxes for non-owner access, don't select any specific mailboxes, and go on to step 10. When the Search these mailboxes box is blank, the search includes all mailboxes.

  15. 焦点在选择邮箱按钮时,请按 Enter 以打开 选择邮箱 对话框。 搜索 框具有焦点,而且您会听到"筛选或搜索编辑"。键入您想要在非所有者邮箱访问搜索中包含的第一个邮箱的名称的全部或一部分,然后按 Enter 以搜索该名称。To open the Select Mailbox dialog box, with the focus on the select mailboxes button, press Enter. The Search box has the focus, and you hear "Filter or search edit." Type all or part of the name of the first mailbox you want to include in the non-owner mailbox access search and then, to search for the name, press Enter.

  16. 若要选择一个邮箱,请大约按 Tab 键四次,直到您在搜索结果列表中听到该邮箱所有者的名称。如果搜索结果列表中存在多个邮箱,请按向下箭头键或向上箭头键,直到您听到该邮箱所有者的名称。To select a mailbox, press the Tab key about four times until you hear the name of the mailbox owner in the search results list. If there are multiple mailboxes in the search results list, press the Down Arrow key or Up Arrow key until you hear the name of the mailbox owner.

    提示

    您可以选择多个连续的邮箱。若要使用所有邮箱,请将 搜索 框保留为空,或输入您要添加的邮箱的名称的全部或一部分。按 Tab 键移到搜索结果。按向下箭头键听到每个名称。若要添加所有邮箱,请按 Ctrl+A。若要添加连续列出的多个邮箱,请按向下箭头键或向上箭头键直到您听到您想要添加的第一个邮箱名称,按住 Shift 键的同时按向下箭头键或向上箭头键,直到您听到您想要添加的最后一个邮箱名称,然后放开 Shift 键。即会选中第一个和最后一个邮箱名称之间的所有邮箱。You can select multiple consecutive mailboxes. To work with all mailboxes, leave the Search box blank, or enter all or part of the mailbox names you want to add. Tab to the search results. Press the Down Arrow key to hear each name. To add them all, press Ctrl+A. To add several mailboxes listed consecutively, press the Down Arrow key or the Up Arrow key until you hear the first mailbox name you want to add, hold down the Shift key, press the Down Arrow key or the Up Arrow key until you hear the last mailbox name you want to add, and then release the Shift key. All mailboxes between the first and last mailbox names are selected.

  17. 请按 Enter 以将所选邮箱添加到非所有者邮箱访问搜索中将包含的列表。邮箱的列表保留焦点,因此您可以通过选择更多邮箱并按 Enter 继续进行添加。To add the selected mailbox(es) to the list to be included in the non-owner mailbox access search, press Enter. The list of mailboxes retains the focus, so you can continue to add more mailboxes by selecting them and pressing Enter.

    提示

    若要查看您已添加的邮箱,请按 Tab 键移到 添加 按钮。若要听到邮箱的列表,请再次按 Tab 键。您会听到列表中的第一个邮箱名称。若要听到列表中的第二个邮箱名称,请再次按 Tab 键。继续按 Tab 键直到您听到您已添加的所有邮箱的名称。若要从列表中删除邮箱,请在您听到邮箱名称时按 Enter 来激活 删除 链接。To check the mailboxes you've added, tab to the Add button. To hear the list of mailboxes, press the Tab key again. You hear the first mailbox name in the list. To hear the second mailbox name in the list, press the Tab key once more. Continue pressing the Tab key until you hear the names of all the mailboxes you've added. To delete a mailbox from the list, activate the Remove link by pressing Enter when you hear the mailbox name.

  18. 若要搜索其他一个或多个邮箱,请按 Tab 键多次直到您听到"筛选或搜索编辑"。键入您想要添加的后续邮箱的名称的全部或一部分,然后按 Enter。重复步骤 b 和 c。对您想要添加的所有邮箱执行此操作。To search for another mailbox or set of mailboxes, tab several times until you hear "Filter or search edit." Type all or part of the name of the next mailboxes you want to add, and press Enter. Repeat steps b and c. Do this for all mailboxes you want to add.

  19. 若要添加外部邮箱,请按 Tab 键直到您听到"检查名称编辑,键入文本"(在讲述人中,听到"正在编辑")。键入外部收件人的电子邮件地址,请按 Shift+Tab 以选择 检查名称 按钮,然后按 Enter。这将验证电子邮件地址,并将其添加到邮箱列表。To add an external mailbox, press the Tab key until you hear "Check names edit, Type in text." (In Narrator, you hear "Editing.") Type the email address of the external recipient, press Shift+Tab to select the Check names button, and then press Enter. This verifies the email address and adds it to the list of mailboxes.

    提示

    请注意,如果您键入外部电子邮件地址,然后按 Enter,这会将地址添加到列表中,然后关闭对话框。如果您未完成,则改用 检查名称 按钮进行添加。Be aware that if you type an external email address and press Enter, this adds the address to the list and then closes the dialog box. If you're not finished, use the Check names button to add it instead.

  20. 添加完邮箱后,按 Tab 键移到 确定 按钮并按 Enter。 搜索非所有者访问过的邮箱 对话框再次具有焦点,而且 搜索这些邮箱 文本框中列出所选邮箱。When you finish adding mailboxes, tab to the OK button and press Enter. The Search for Mailboxes Accessed by Non-Owners dialog box has the focus again, and the Search these mailboxes text box lists the selected mailboxes.

  21. 按 Tab 键移到 搜索以下人员的访问 组合框。此将指定您希望非所有者邮箱报告显示的邮箱非所有者的类型。Tab to the Search for access by combo box. This specifies which types of mailbox non-owners you want the non-owner mailbox report to show.

    • 若要搜索管理员访问的审核日志,您不需要执行任何操作,因为这是默认值。To search the audit logs for administrator access, you don't need to do anything, as this is the default.

    • 若要搜索其他组的非所有者的审核日志,如 全部非所有者外部用户 (Microsoft 数据中心管理员)或 管理员和受委派用户 ,请按向上箭头键移到所需的用户类型。To search the audit logs for another group of non-owners, like All non-owners, External users (Microsoft datacenter administrators), or Administrators and delegated users, press the Up Arrow key to move to the user type you want.

  22. 按 Tab 键以访问 搜索 按钮,然后按 Enter。Press the Tab key to access the Search button, and press Enter.

  23. 大约按 Tab 键四次以访问搜索结果。如果在您选择的时间段内,您指定的某类型非所有者访问了任何邮箱,您会听到邮箱所有者的名称和非所有者访问邮箱的日期。如果非所有者未访问任何邮箱,您会听到"此视图中没有要显示的项目"(在讲述人 中,会听到"没有任何项目")。Press the Tab key about four times to access the search results. If any mailboxes were accessed by a non-owner of the type you specified in the time period you selected, you hear the name of the mailbox owner and the date the mailbox was accessed by a non-owner. If none of the mailboxes were accessed by a non-owner, you hear "There are no items to show in this view." (In Narrator, you hear "Contains 0 items.")

  24. 查看有关非所有者邮箱访问的详细信息,请在搜索结果列表中选择项目后,按 Tab 键移到 细节 窗格。若要打印 细节 窗格的内容,请按 Enter。若要听到 细节 窗格的内容,请再次按 Tab。For more details about a non-owner mailbox access, with the item selected in the search results list, press the Tab key to move to the details pane. To print the contents of the details pane, press Enter. To hear the contents of the details pane, press Tab again.

  25. 若要关闭该对话框,按 Tab 键移到 关闭 按钮,然后按 Enter。To close the dialog box, tab to the Close button and press Enter.

提示

您还可以导出非所有者邮箱访问的日志并在 XML 文件中进行查看。在使用屏幕阅读器导出和查看 Exchange 管理员中心中的审核日志中了解详细信息。You can also export the log of non-owner access of mailboxes and review it in an XML file. Learn more in Use a screen reader to export and review audit logs in the Exchange admin center.

搜索邮箱上的配置更改Search for configuration changes on a mailbox

通过管理员审核日志记录,Exchange 记录管理员对组织的 Exchange 配置进行的特定更改。这些更改包括添加用户、添加公用文件夹、创建策略或规则等等。这可以帮助你解决配置问题或找出与安全或合规性相关的问题的原因。了解有关查看管理员审核日志的详细信息With administrator audit logging, Exchange records specific changes an administrator makes to the organization's Exchange configuration. Such changes can include adding users, adding public folders, creating policies or rules, and so on. This can help you troubleshoot configuration problems or identify the cause of security-related or compliance-related problems. Learn more about viewing the administrator audit log.

  1. 在 EAC 中,按 Ctrl+F6,直到主导航窗格具有焦点而且听到"仪表板,主导航链接"。In the EAC, press Ctrl+F6 until the primary navigation pane has the focus and you hear "Dashboard, Primary navigation link."

  2. 按 Tab 键移到 合规性管理 ,然后按 Enter。Tab to compliance management and press Enter.

  3. 若要移到菜单栏,请按 Ctrl+F6。To move to the menu bar, press Ctrl+F6.

  4. 按 Tab 键移到 审核 。您会听到"审核,辅助导航链接"。按 Enter。Tab to auditing. You hear "Auditing, Secondary navigation link." Press Enter.

  5. 若要访问主窗口列表视图,请按 Ctrl+F6。您会听到"审核报告"。To access the main window list view, press Ctrl+F6. You hear "Audit reports."

  6. 大约按 Tab 键 12 次,直到您听到"运行管理员审核日志报告"。按 Enter。Press the Tab key about 12 times until you hear "Run the admin audit log report." Press Enter.

  7. 在打开的 查看管理员审核日志 对话框中, 开始日期年份 组合框具有焦点,并且听到"开始日期年份组合框"。In the View the Administrator Audit Log dialog box which opens, the Start date year combo box has the focus, and you hear "Year of Start date combo box."

    提示

    默认情况下,开始日期设置为昨天日期之前的两周。管理员审核日志通常将条目存储 90 天。By default, the start date is set to two weeks before yesterday's date. The administrator audit log typically stores entries for 90 days.

  8. 如有必要,键入管理员配置更改搜索的开始日期年份。您还可以通过按向上箭头键或向下箭头键选择开始日期年份。If necessary, type the start date year for your administrator configuration change search. You can also select the start date year by pressing the Up Arrow key or the Down Arrow key.

  9. 按 Tab 键移到 文本框,然后键入或选择开始日期月份。Tab to the month text box, and type or select the start date month.

  10. 按 Tab 键移到 文本框,然后键入或选择开始日期日。Tab to the day text box, and type or select the start date day.

  11. 按 Tab 键移到 结束日期年份 组合框。您会听到"结束日期年份组合框"。Tab to the End date year combo box. You hear "Year of End date combo box."

    提示

    默认结束日期为当天日期。The default end date is today's date.

  12. 如有必要,键入管理员配置更改搜索的开始日期年份。您还可以通过按向上箭头键或向下箭头键选择结束日期年份。If necessary, type the start date year for your administrator configuration change search. You can also select the end date year by pressing the Up Arrow key or the Down Arrow key.

  13. 按 Tab 键移到 文本框,然后键入或选择结束日期月份。Tab to the month text box, and type or select the end date month.

  14. 按 Tab 键移到 文本框,然后键入或选择结束日期日。Tab to the day text box, and type or select the end date day.

  15. 按 Tab 键以访问 搜索 按钮,然后按 Enter。Press the Tab key to access the search button, and press Enter.

  16. 大约按 Tab 键五次以访问搜索结果。按向下箭头键或向上箭头键以听到您指定的时间段内配置更改的列表。听到每个项目更改的日期、配置更改类型和进行更改的管理员名称。如果没有任何配置更改,您会听到"此视图中没有要显示的项目"(在讲述人中,会听到"没有任何项目")。Press the Tab key about five times to access the search results. Press the Down Arrow key or the Up Arrow key to hear the list of configuration changes made in the time period you specified. For each item, you hear the date of the change, the type of configuration change made, and the name of the Administrator who made the change. If there were no configuration changes, you hear "There are no items to show in this view." (In Narrator, you hear "Contains 0 items.")

  17. 查看有关配置更改的详细信息,请在搜索结果列表中选择更改后,按 Tab 键移到 细节 窗格。若要打印 细节 窗格的内容,请按 Enter。若要听到 细节 窗格的内容,请再次按 Tab。For more details about a configuration change, with the change selected in the search results list, press the Tab key to move to the details pane. To print the contents of the details pane, press Enter. To hear the contents of the details pane, press Tab again.

  18. 若要关闭该对话框,按 Tab 键移到 关闭 按钮,然后按 Enter。To close the dialog box, tab to the Close button and press Enter.

提示

您还可以将管理员审核日志导出到 XML 文件并将其通过电子邮件发送至特定的收件人。在审核页面,按 Tab 键直到您听到"导出管理员审核日志"。按 Enter 键,然后在出现的 导出管理员审核日志 对话框中进行操作。有关详细信息,请转到 使用屏幕阅读器导出和查看 Exchange 管理员中心中的审核日志You can also export the admin audit log to an XML file and email it to specified recipients. On the auditing page, press the Tab key until you hear "Export the admin audit log." Press Enter and work through the Export the Administrator Audit Log dialog box which appears. For more information, go to Use a screen reader to export and review audit logs in the Exchange admin center.

搜索对管理员角色组所做的更改Search for administrator role group changes

你可以搜索管理员角色更改,此更改与配置更改一样,已记录在管理员审核日志中。你可以通过使用目标搜索,检查角色组(用于向用户分配管理权限)更改的管理员审核日志。了解有关运行管理员角色组报告的详细信息You can search for administrator role changes, which, like configuration changes, are recorded in the administrator audit log. With a targeted search, you can examine the admin audit log for changes made to role groups, which are used to assign administrative permissions to users. Learn more about running an administrator role group report.

  1. 在 EAC 中,按 Ctrl+F6,直到主导航窗格具有焦点而且听到"仪表板,主导航链接"。In the EAC, press Ctrl+F6 until the primary navigation pane has the focus and you hear "Dashboard, Primary navigation link."

  2. 按 Tab 键移到 合规性管理 ,然后按 Enter。Tab to compliance management and press Enter.

  3. 若要移到菜单栏,请按 Ctrl+F6。To move to the menu bar, press Ctrl+F6.

  4. 按 Tab 键移到审核。您会听到"审核,辅助导航链接"。按 Enter。Tab to auditing. You hear "Auditing, Secondary navigation link." Press Enter.

  5. 若要访问主窗口列表视图,请按 Ctrl+F6。您会听到"审核报告"。To access the main window list view, press Ctrl+F6. You hear "Audit reports."

  6. 大约按 Tab 键九次,直到您听到"运行管理员角色组报告"。按 Enter。Press the Tab key about nine times until you hear "Run an administrator role group report." Press Enter.

  7. 在打开的 搜索对管理员角色组的更改 对话框中, 开始日期年份 组合框具有焦点,并且听到"开始日期年份组合框"。In the Search for Changes to Administrative Role Groups dialog box which opens, the Start date year combo box has the focus, and you hear "Year of Start date combo box."

    提示

    默认情况下,开始日期设置为昨天日期之前的两周。管理员审核日志通常将条目存储 90 天。By default, the start date is set to two weeks before yesterday's date. The administrator audit log typically stores entries for 90 days.

  8. 如有必要,键入管理员角色组更改搜索的开始日期年份。您还可以通过按向上箭头键或向下箭头键选择开始日期年份。If necessary, type the start date year for your administrator role group change search. You can also select the start date year by pressing the Up Arrow key or the Down Arrow key.

  9. 按 Tab 键移到 文本框,然后键入或选择开始日期月份。Tab to the month text box, and type or select the start date month.

  10. 按 Tab 键移到 文本框,然后键入或选择开始日期日。Tab to the day text box, and type or select the start date day.

  11. 按 Tab 键移到 结束日期年份 组合框。您会听到"结束日期年份组合框"。Tab to the End date year combo box. You hear "Year of End date combo box."

    提示

    默认结束日期为当天日期。The default end date is today's date.

  12. 如有必要,键入管理员角色组更改搜索的开始日期年份。您还可以通过按向上箭头键或向下箭头键选择结束日期年份。If necessary, type the start date year for your administrator role group change search. You can also select the end date year by pressing the Up Arrow key or the Down Arrow key.

  13. 按 Tab 键移到 文本框,然后键入或选择结束日期月份。Tab to the month text box, and type or select the end date month.

  14. 按 Tab 键移到 文本框,然后键入或选择结束日期日。Tab to the day text box, and type or select the end date day.

  15. 按 Tab 键两次以移到 选择角色组 按钮。您会听到"搜索这些角色组,或将此框保留为空白以查找所有已更改的角色组"。To access the select role groups button, press the Tab key twice. You hear "Search these role groups or leave this box blank to find all changed role groups."

    提示

    如果您想要搜索更改的所有角色组,请不要选择任何特定的角色组,然后继续转到步骤 10。当 搜索这些角色组 框为空时,搜索将包括所有角色组。If you want to search all role groups for changes, don't select any specific role groups, and go on to step 10. When the Search these role groups box is blank, the search includes all role groups.

  16. 焦点在选择角色组按钮时,请按 Enter 以打开 选择角色 对话框。 搜索 框具有焦点,而且您会听到"筛选或搜索编辑"。键入您想要在搜索中包含的第一个角色组的名称的全部或一部分,然后按 Enter 以搜索该角色组。To open the Select a Role dialog box, with the focus on the select role groups button, press Enter. The Search box has the focus, and you hear "Filter or search edit." Type all or part of the name of the first role group you want to include in the search and then, to search for the role group, press Enter.

  17. 若要选择一个角色组,请大约按 Tab 键三次,直到您在搜索结果列表中听到该角色组的名称。如果搜索结果列表中存在多个角色组,请按向下箭头键或向上箭头键,直到您听到该角色组的名称。To select a role group, press the Tab key about three times until you hear the name of the role group in the search results list. If there are role groups in the search results list, press the Down Arrow key or Up Arrow key until you hear the name of the role group.

    提示

    您可以选择多个连续的角色组。若要使用所有角色组,请将 搜索 框保留为空,或输入您要添加的角色组的名称的全部或一部分。按 Tab 键移到搜索结果。按向下箭头键听到每个名称。若要添加所有角色组,请按 Ctrl+A。若要添加连续列出的多个角色组,请按向下箭头键或向上箭头键直到您听到您想要添加的第一个角色组的名称,按住 Shift 键的同时按向下箭头键或向上箭头键,直到您听到您想要添加的最后一个角色组的名称,然后放开 Shift 键。即会选中第一个和最后一个名称之间的所有角色组。You can select multiple consecutive role groups. To work with all role groups, leave the Search box blank, or enter all or part of the role group names you want to add. Tab to the search results. Press the Down Arrow key to hear each name. To add them all, press Ctrl+A. To add several role groups listed consecutively, press the Down Arrow key or the Up Arrow key until you hear the first role group name you want to add, hold down the Shift key, press the Down Arrow key or the Up Arrow key until you hear the last role group name you want to add, and then release the Shift key. All role groups between the first and last names are selected.

  18. 按 Enter 以将所选择的角色组添加到角色组更改搜索中将包含的列表。角色组的列表保留焦点,因此您可以通过选择更多角色组并按 Enter 继续进行添加。To add the selected role group(s) to the list to be included in the role group change search, press Enter. The list of role groups retains the focus, so you can continue to add more role groups by selecting them and pressing Enter.

    提示

    若要查看您已添加的角色组,请按 Tab 键移到 添加 按钮。若要听到角色组的列表,请再次按 Tab 键。听到列表中第一个角色组的名称。若要听到列表中第二个角色组的名称,请再次按 Tab 键。继续按 Tab 键直到您听到您已添加的所有角色组的名称。若要从列表中删除角色组,请在您听到相应的角色组名称时按 Enter 来激活 删除 链接。To check the role groups you've added, tab to the Add button. To hear the list of role groups, press the Tab key again. You hear the first role group name in the list. To hear the second role group name in the list, press the Tab key once more. Continue pressing the Tab key until you hear the names of all the role groups you've added. To delete a role group from the list, activate the Remove link by pressing Enter when you hear the role group name.

  19. 添加完角色组后,按 Tab 键移到 确定 按钮并按 Enter。 搜索对管理员角色组的更改 对话框将再次具有焦点,且 搜索这些角色组 文本框中列出了您已选择的角色组。When you finish adding role groups, tab to the OK button and press Enter. The Search for Changes to Administrator Role Groups dialog box has the focus again, and the Search these role groups text box lists your selected role groups.

  20. 按 Tab 键以访问 搜索 按钮,然后按 Enter。Press the Tab key to access the Search button, and press Enter.

  21. 大约按 Tab 键四次以访问搜索结果。如果在您选择的时间段内任何您选择的角色组进行了更改,您会听到该角色组的名称和更改日期。如果没有更改任何角色组,您会听到"此视图中没有要显示的项目"(在讲述人中,会听到"没有任何更改")。Press the Tab key about four times to access the search results. If any of your selected role groups were changed in the time period you selected, you hear the name of the role group and the date of the change. If none of the role groups were changed, you hear "There are no items to show in this view." (In Narrator, you hear "Contains 0 items.")

  22. 查看有关角色组更改的详细信息,请在搜索结果列表中选择更改后,按 Tab 键移到 细节 窗格。若要打印细节窗格的内容,请按 Enter。若要听到 细节 窗格的内容,请再次按 Tab。For more details about a role group change, with the change selected in the search results list, press the Tab key to move to the details pane. To print the contents of the details pane, press Enter. To hear the contents of the details pane, press Tab again.

  23. 若要关闭该对话框,按 Tab 键移到 关闭 按钮,然后按 Enter。To close the dialog box, tab to the Close button and press Enter.

查找有关合规性状态更改的数据Find data about changes to compliance status

通过查找对就地电子数据展示和保留及每个邮箱诉讼保留的更改监测法规、合规性和诉讼要求。此信息可在 合规性管理 选项卡和 EAC 的 审核 页面上获取。Monitor regulatory, compliance, and litigation requirements by finding status changes to In-Place eDiscovery and Hold and the Per-mailbox Litigation Hold. This information is available on the Compliance Management tab and the Auditing page of the EAC.

搜索对就地电子数据展示和保留状态的更改Search for changes to In-Place eDiscovery and Hold status

如果您的组织符合法律要求 (与组织的策略、 合规性或诉讼相关),就地电子数据展示和就地保留在 Exchange Online 可以帮助您执行发现搜索邮箱内的相关内容。您可以搜索管理员审核日志以查找已置于或从就地电子数据展示或就地保留中删除的邮箱。了解有关就地电子数据展示&保留报告If your organization adheres to legal discovery requirements (related to organizational policy, compliance, or lawsuits), In-Place eDiscovery and In-Place Hold in Exchange Online can help you perform discovery searches for relevant content within mailboxes. You can search the administrator audit log to find mailboxes that have been put on or removed from In-Place eDiscovery or In-Place Hold. Learn more about In-Place eDiscovery & Hold reports.

  1. 在 EAC 中,按 Ctrl+F6,直到主导航窗格具有焦点而且听到"仪表板,主导航链接"。In the EAC, press Ctrl+F6 until the primary navigation pane has the focus and you hear "Dashboard, Primary navigation link."

  2. 按 Tab 键移到 合规性管理 ,然后按 Enter。Tab to compliance management and press Enter.

  3. 若要移到菜单栏,请按 Ctrl+F6。To move to the menu bar, press Ctrl+F6.

  4. 按 Tab 键移到 审核 。您会听到"审核,辅助导航链接"。按 Enter。Tab to auditing. You hear "Auditing, Secondary navigation link." Press Enter.

  5. 若要访问主窗口列表视图,请按 Ctrl+F6。您会听到"审核报告"。To access the main window list view, press Ctrl+F6. You hear "Audit reports."

  6. 大约按 Tab 键 15 次,直到您听到"运行就地电子数据展示和保留报告"。按 Enter。Press the Tab key about 15 times until you hear "Run an In-Place eDiscovery and Hold report." Press Enter.

  7. 更改就地电子数据展示搜索&保留对话框该对话框将打开,开始日期年组合框具有焦点,并且您听到"一年开始日期组合框"。In the Search for changes to In-Place eDiscovery & Hold dialog box which opens, the Start date year combo box has the focus, and you hear "Year of Start date combo box."

    提示

    默认情况下,开始日期设置为昨天日期之前的两周。管理员审核日志通常将条目存储 90 天。By default, the start date is set to two weeks before yesterday's date. The administrator audit log typically stores entries for 90 days.

  8. 如有必要,键入电子数据展示和保留更改搜索的开始日期年份。您还可以通过按向上箭头键或向下箭头键选择开始日期年份。If necessary, type the start date year for the eDiscovery and Hold change search. You can also select the start date year by pressing the Up Arrow key or the Down Arrow key.

  9. 按 Tab 键移到 文本框,然后键入或选择开始日期月份。Tab to the month text box, and type or select the start date month.

  10. 按 Tab 键移到 文本框,然后键入或选择开始日期日。Tab to the day text box, and type or select the start date day.

  11. 按 Tab 键移到 结束日期年份 组合框。您会听到"结束日期年份组合框"。Tab to the End date year combo box. You hear "Year of End date combo box."

    提示

    默认结束日期为当天日期。The default end date is today's date.

  12. 如有必要,键入电子数据展示和保留更改搜索的结束日期年份。您还可以通过按向上箭头键或向下箭头键选择结束日期年份。If necessary, type the end date year for your eDiscovery and Hold change search. You can also select the end date year by pressing the Up Arrow key or the Down Arrow key.

  13. 按 Tab 键移到 文本框,然后键入或选择结束日期月份。Tab to the month text box, and type or select the end date month.

  14. 按 Tab 键移到 文本框,然后键入或选择结束日期日。Tab to the day text box, and type or select the end date day.

  15. 按 Tab 键以访问 搜索 按钮,然后按 Enter。Press the Tab key to access the Search button, and press Enter.

  16. 大约按 Tab 键三次以访问搜索结果。如果在您选择的时间段内任何电子数据展示或保留进行了更改,则会听到相应的名称。如果没有进行任何更改,您会听到"此视图中没有要显示的项目"(在讲述人中,会听到"没有任何更改")。Press the Tab key about three times to access the search results. If any eDiscovery or Holds were changed in the time period you selected, you hear their names. If none have been changed, you hear "There are no items to show in this view." (In Narrator, you hear "Contains 0 items.")

  17. 查看有关电子数据展示或保留更改的更多详细信息,请在搜索结果列表中选择更改后,按 Tab 键移到细节窗格。若要打印 细节 窗格的内容,请按 Enter。若要听到 细节 窗格的内容,请再次按 Tab。For more details about an eDiscovery or Hold change, with the change selected in the search results list, press the Tab key to move to the details pane. To print the contents of the details pane, press Enter. To hear the contents of the details pane, press Tab again.

  18. 若要关闭该对话框,按 Tab 键移到 关闭 按钮,然后按 Enter。To close the dialog box, tab to the Close button and press Enter.

搜索诉讼保留已启用或禁用的邮箱Search for mailboxes that are enabled or disabled for litigation holds

如果你的组织涉及某项法律诉讼,则你可能必须采取步骤以保留可能会用作证据的相关数据。你可以使用诉讼保留来保留特定人员发送和接收的所有电子邮件,或保留特定时间段内在你的组织中发送和接收的所有电子邮件。搜索管理员审核日志以监测在特定时间段内已更改其诉讼保留状态(启用或禁用)的邮箱。了解有关运行每个邮箱诉讼保留报告的详细信息。If your organization is involved in a legal action, you may have to take steps to preserve email messages that might be used as evidence. You can use the litigation hold feature to retain all email sent and received by specific people or retain all email sent and received in your organization for a specific time period. Search the administrator audit log to monitor the mailboxes that have had a change to their litigation hold status (enabled or disabled) during a specified time period. Learn more about running a per-mailbox litigation hold report.

  1. 在 EAC 中,按 Ctrl+F6,直到主导航窗格具有焦点而且听到"仪表板,主导航链接"。In the EAC, press Ctrl+F6 until the primary navigation pane has the focus and you hear "Dashboard, Primary navigation link."

  2. 按 Tab 键移到 合规性管理 ,然后按 Enter。Tab to compliance management and press Enter.

  3. 若要移到菜单栏,请按 Ctrl+F6。To move to the menu bar, press Ctrl+F6.

  4. 按 Tab 键移到 审核 。您会听到"审核,辅助导航链接"。按 Enter。Tab to auditing. You hear "Auditing, Secondary navigation link." Press Enter.

  5. 若要访问主窗口列表视图,请按 Ctrl+F6。您会听到"审核报告"。To access the main window list view, press Ctrl+F6. You hear "Audit reports."

  6. 大约按 Tab 键 21 次,直到您听到"运行每个邮箱诉讼保留报告"。按 Enter。Press the Tab key about 21 times until you hear "Run a per-mailbox Litigation Hold report." Press Enter.

  7. 在打开的 搜索每个邮箱诉讼保留的更改 对话框中, 开始日期年份 组合框具有焦点,并且听到"开始日期年份组合框"。In the Search for Changes to Per-Mailbox Litigation Hold dialog box which opens, the Start date year combo box has the focus, and you hear "Year of Start date combo box."

    提示

    默认情况下,开始日期设置为昨天日期之前的两周。管理员审核日志通常将条目存储 90 天。By default, the start date is set to two weeks before yesterday's date. The administrator audit log typically stores entries for 90 days.

  8. 如有必要,键入诉讼保留更改搜索的开始日期年份。您还可以通过按向上箭头键或向下箭头键选择开始日期年份。If necessary, type the start date year for your litigation hold change search. You can also select the start date year by pressing the Up Arrow key or the Down Arrow key.

  9. 按 Tab 键移到 文本框,然后键入或选择开始日期月份。Tab to the month text box, and type or select the start date month.

  10. 按 Tab 键移到 文本框,然后键入或选择开始日期日。Tab to the day text box, and type or select the start date day.

  11. 按 Tab 键移到 结束日期年份 组合框。您会听到"结束日期年份组合框"。Tab to the End date year combo box. You hear "Year of End date combo box."

    提示

    默认结束日期为当天日期。The default end date is today's date.

  12. 如有必要,键入诉讼保留更改搜索的结束日期年份。您还可以通过按向上箭头键或向下箭头键选择结束日期年份。If necessary, type the end date year for your litigation hold change search. You can also select the end date year by pressing the Up Arrow key or the Down Arrow key.

  13. 按 Tab 键移到 文本框,然后键入或选择结束日期月份。Tab to the month text box, and type or select the end date month.

  14. 按 Tab 键移到 文本框,然后键入或选择结束日期日。Tab to the day text box, and type or select the end date day.

  15. 按 Tab 键两次以访问选择用户按钮。您会听到"搜索这些邮箱,或保留为空白以查找包含诉讼保留更改的所有邮箱"。To access the select users button, press the Tab key twice. You hear "Search these mailboxes or leave blank to find all mailboxes with litigation hold changes."

    提示

    如果您想要搜索诉讼保留更改的所有邮箱,请不要选择任何特定的邮箱,然后继续转至步骤 10。当 搜索这些邮箱 框为空时,搜索将包括所有邮箱。If you want to search all mailboxes for litigation hold changes, don't select any specific mailboxes, and go on to step 10. When the Search these mailboxes box is blank, the search includes all mailboxes.

  16. 若要打开 选择成员 对话框,请在选择用户按钮上具有焦点时,按 Enter。 搜索 按钮具有焦点。若要搜索组织内的用户,请按空格键,键入该用户名称的全部或一部分,然后按 Enter。To open the Select Members dialog box, with the focus on the select users button, press Enter. The Search button has the focus. To search for a user within your organization, press the Spacebar, type all or part of the name of the user, and then press Enter.

  17. 按 Tab 键约 7 次,直到您在搜索结果列表中听到该用户的名称。Press the Tab key about seven times until you hear the name of the user in the search results list.

  18. 若要将用户添加到诉讼保留搜索中的邮箱列表,请按向下箭头键直到您听到该用户的名称,然后按 Enter。用户的列表保留焦点,因此您可以通过选择用户的邮箱并按 Enter 继续添加更多用户。To add the user to the list of mailboxes in the litigation hold search, press the Down Arrow key until you hear the user's name, and then press Enter. The list of users retains the focus, so you can continue to add more users by selecting their mailboxes and pressing Enter.

    提示

    若要查看您已添加的用户,请按 Tab 键移到 添加 按钮。若要听到用户的列表,请再次按 Tab 键。即会阅读第一个名称。若要听到列表中的第二个名称,请再次按 Tab 键。继续按 Tab 键直到您听到您已添加的所有用户的名称。若要从列表中删除用户,请在您听到用户名称时按 Enter 来激活 删除 链接。To check the users you've added, tab to the Add button. To hear the list of users, press the Tab key again. The first name is read. To hear the second name in the list, press the Tab key once more. Continue pressing the Tab key until you hear the names of all the users you've added. To delete a user from the list, activate the Remove link by pressing Enter when you hear the user name.

  19. 若要添加外部用户,请按 Tab 键直到您听到"检查名称编辑,键入文本"(在"讲述人"中,您会听到"正在编辑")。键入外部用户的电子邮件地址,请按 Shift+Tab 以选择 检查名称 按钮,然后按 Enter。这将验证电子邮件地址,并将其添加到用户列表。To add an external user, press the Tab key until you hear "Check names edit, Type in text." (In Narrator, you hear "Editing.") Type the email address of the external user, press Shift+Tab to select the Check names button, and then press Enter. This verifies the email address and adds it to the list of users.

    提示

    请注意,如果您键入外部电子邮件地址,然后按 Enter,这会将用户添加到列表中,然后关闭对话框。如果您未完成,则改用 检查名称 按钮进行添加。Be aware that if you type an external email address and press Enter, this adds the user to the list and then closes the dialog box. If you're not finished, use the Check names button to add it instead.

  20. 添加完用户后,按 Tab 键移到 确定 按钮并按 Enter。 搜索每个邮箱诉讼保留的更改 对话框再次具有焦点,且 搜索这些邮箱 文本框中列出了要搜索的诉讼保留更改的邮箱。When you finish adding users, tab to the OK button and press Enter. The Search for Changes to Per-Mailbox Litigation Hold dialog box has the focus again, and the Search these mailboxes text box lists the mailboxes to be searched for litigation hold changes.

  21. 按 Tab 键以访问 搜索 按钮,然后按 Enter。Press the Tab key to access the Search button, and press Enter.

  22. 大约按 Tab 键三次以访问搜索结果。如果在您选择的时间段内任何邮箱更改了其诉讼保留状态,听到邮箱所有者的名字。如果非所有者未访问任何邮箱,您会听到"此视图中没有要显示的项目"(在"讲述人"中,会听到"没有任何项目")。Press the Tab key about three times to access the search results. If any mailboxes had a change to its litigation hold status in the time period you selected, you hear the name of the mailbox owner. If none of the mailboxes were accessed by a non-owner, you hear "There are no items to show in this view." (In Narrator, you hear "Contains 0 items.")

  23. 查看有关诉讼保留更改的更多详细信息,请在搜索结果列表中选择更改后,按 Tab 键移到细节窗格。若要打印细节窗格的内容,请按 Enter。若要听到细节窗格的内容,请再次按 Tab。For more details about a litigation hold change, with the change selected in the search results list, press the Tab key to move to the details pane. To print the contents of the details pane, press Enter. To hear the contents of the details pane, press Tab again.

  24. 若要关闭该对话框,按 Tab 键移到 关闭 按钮,然后按 Enter。To close the dialog box, tab to the Close button and press Enter.