Forum Discussion
AAD to SharePoint Sync deleted the website twice
Hi
The issue was because Someone had created a Team from the Sharepoint Team banner, then tried to delete the team and when they do that the linked AD group got deleted as well which is why the deletion of SharePoint showed up as "AAD to SharePoint Sync". Doing and Audit for "Deleted team" reveled who made and deleted the team.
https://support.microsoft.com/en-us/office/use-policies-for-site-closure-and-deletion-a8280d82-27fd-48c5-9adf-8a5431208ba5
Hi
The issue was because Someone had created a Team from the Sharepoint Team banner, then tried to delete the team and when they do that the linked AD group got deleted as well which is why the deletion of SharePoint showed up as "AAD to SharePoint Sync". Doing and Audit for "Deleted team" reveled who made and deleted the team.
This helped but was not the answer in our case. In audit I did a search for a whole range of "Deleted *" items and it showed that someone in First Line had "Deleted Group" just minutes before the SharePoint site was deleted by "AAD to SharePoint Sync".
It turns out they deleted a mail group because the name was too similar to a departments mail group and was causing confusion. Deleting the group actually deleted the SharePoint site which was unexpected.Thank you, that answered my question quite quickly and helped us figured out what happened. I wish there was way to prevent owners from deleting an entire sharepoint... I wasn't able to find a solution for this. This article dated from 2021 says it couldn't be done. Has this changed since?
- Hi, a classic (and twice!) 🙂 I just assumed that wasn’t the case. You should set up activity alerts for these scenarios.
