Remember to subscribe to the blog so you don’t miss more of my walkthroughs. This will make your life so much easier especially when users report files have disappeared or if you suspect an employee is downloading files they shouldn’t be to their home computer. They are incredibly useful so its worth enabling the feature as soon as possible because you never know when you will need it. You have now seen how to enable and access the Audit search logs. You can select any log entry and view more details including the exact location of the file.
#Admin activity audit logs pdf#
Here we can see a user accessed a network plan pdf file. You can also search the log to see what users have been accessing files, where they accessed them from and at what time. Once I waited a few minutes everything appeared in the logs as shown below. The logs wont show activity straight away, it can take 5-20 minutes after the fact before you see entries in the logs.
Logs activity around users, groups, memberships, and roles, such as adding and removing users and groups. Now its all in black and white showing who did what, when and where.Īs a test I created a new user called Peter Pan, reset the password and deleted the user. Logs instance or system admin activity around instance administration or configuration such as platform changes or upgrades to global settings. This is a fantastic feature for us admins especially when dealing with user support requests or when trying to find the cause of an issue. See when files are checked in, see which files get deleted or restored see when files are downloaded to a computer and lots more. Once the logs are ready you can search the logs for almost any activity performed on the 365 system. Once enabled you will see a message stating that the logs are being prepared and will be available in a couple of hours. Security & Compliance -> Search & investigation -> Audit log searchĬlick Turn on to start recording information to the logs. Do you want to see which admin deleted that user account or which user accessed that file and where from? well you will find out how right now!įirst you need to start recording user and admin activities using the link under Its Office 365 time again in the lab and this time we are going to take a look at auditing.
0 kommentar(er)
