Incorrect Audit Log in Teams ?

Question

question

DG-4126 asked Apr 6, '20 SharonZhao-MSFT answered Apr 8, '20

Incorrect Audit Log in Teams ?

Hi
I am one of the Seven Owners for a Microsoft Teams Group.
while trying to clean up the Group another Owner Removed some people from the Group.
However on 'Posts' Screen I am seeing My Name linked to the above Removal which i have nothing to do with.

Initially I was worried if someone using my login to do the removal, but later when my colleague Confirmed that it was him who removed it from his login we are wondering how that is even possible.

if the Audit trail is tagging me incorrectly instead of him or some other possibility here.

Thanks & Regards
Ram G

office-teams-windows-itpro

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2020-04-07T07:45:58.813Z

SharonZhao-MSFT answered Apr 7, '20

Hi DG-4126,

Do you filter the removed members activity in Audit log search?

I tested in my environment. It shows the removed user but not who removed the user as the following image:

So, if you can give us a more detailed description, we could know your situation very well.

269.png (2.8 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2020-04-07T14:29:52.673Z

DG-4126 answered Apr 7, '20

Hi SharonZhao-9394,

Thank you for your response.

here is how it shows in Teams Posts.

I do not have access to Audit Logs but My IT Helpdesk Confirmed that logs are showing as if I removed/Added users to the group.

auditlogissue-microsoft-teams.png (9.2 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2020-04-08T08:57:49.823Z

SharonZhao-MSFT answered Apr 8, '20

Hi DG-4126,

It is so strange. You could assign other users as owner. Then they remove or add user to the team. Check if the results is no problem.

I tested in my environment. It shows the information correctly.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question