Find Poison Exchange Mailboxes (Get-MailboxQuarantine)

This script will look for quarantined event log ID 10018 which is created when a user has been quarantined in Exchange 2010 or 2013. This is currently the only way to find out when a user was quarantined.

5 Star
1,019 times
Add to favorites
E-mail Twitter Digg Facebook
Verified on the following platforms
Windows 10 No
Windows Server 2012 Yes
Windows Server 2012 R2 No
Windows Server 2008 R2 Yes
Windows Server 2008 Yes
Windows Server 2003 No
Windows Server 2016 No
Windows 8 No
Windows 7 No
Windows Vista No
Windows XP No
Windows 2000 No
This script is tested on these platforms by the author. It is likely to work on other platforms as well. If you try it and find that it works on another platform, please add a note to the script discussion to let others know.