Forum Discussion
jaseparlo
Mar 18, 2019Copper Contributor
Find who changed settings
 Last year we turned off the ability for users to create sites in Sharepoint Online.  We've just discovered a number of sites were created by users last week, and sure enough checking the settings tha...
- Mar 19, 2019Generally speaking, your best bet is to query the Office 365 Unified Audit log: https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance However, as far as I'm aware changes for this particular setting are not being audited... 
VasilMichev
Mar 19, 2019MVP
Generally speaking, your best bet is to query the Office 365 Unified Audit log: https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance
However, as far as I'm aware changes for this particular setting are not being audited...