Incorrect Audit Log in Teams ?

Question

question

DG-4126 asked · Apr 06 at 07:05 PM

Incorrect Audit Log in Teams ?

Hi I am one of the Seven Owners for a Microsoft Teams Group.
while trying to clean up the Group another Owner Removed some people from the Group. However on 'Posts' Screen I am seeing My Name linked to the above Removal which i have nothing to do with.

Initially I was worried if someone using my login to do the removal, but later when my colleague Confirmed that it was him who removed it from his login we are wondering how that is even possible.

if the Audit trail is tagging me incorrectly instead of him or some other possibility here.

Thanks & Regards Ram G

teams

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2020-04-07T07:45:58.813Z

SharonZhao-9394 answered · Apr 07 at 07:45 AM

Hi DG-4126,

Do you filter the removed members activity in Audit log search?

I tested in my environment. It shows the removed user but not who removed the user as the following image:

So, if you can give us a more detailed description, we could know your situation very well.

269.png (2.8 KiB)

· Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2020-04-07T14:29:52.673Z

DG-4126 answered · Apr 07 at 02:29 PM

Hi SharonZhao-9394,

Thank you for your response.

here is how it shows in Teams Posts.

I do not have access to Audit Logs but My IT Helpdesk Confirmed that logs are showing as if I removed/Added users to the group.

auditlogissue-microsoft-teams.png (9.2 KiB)

· Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2020-04-08T08:57:49.823Z

SharonZhao-9394 answered · Apr 08 at 08:57 AM

Hi DG-4126,

It is so strange. You could assign other users as owner. Then they remove or add user to the team. Check if the results is no problem.

I tested in my environment. It shows the information correctly.

· Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question