Forum Discussion

Joseph Reynoso's avatar
Joseph Reynoso
Brass Contributor
Jun 05, 2017

Issue with group calendars deleting entries

We noticed that our group calendar entries have been erased (not sure how) for one of our Groups. Has anyone seen this with any other group calendars? How do we find where these entries have gone?  ...
Calendar
groups
Office 365 Groups
jcgonzalezmartin's avatar
jcgonzalezmartin
MVP
Jun 06, 2017
What do you mean by "one of our Groups"? By the way, I'm afraid you won't have an easy way to get this information...I have just reviewed if the Compliance & Security Center provides a way to get this information by means of the Audit Log Search, but unfortunately that's not the case
  • Joseph Atwell's avatar
    Joseph Atwell
    Copper Contributor
    Jun 06, 2017

    We use an Office 365 group to manage time off and other items. Last week, someone noticed that all past calendar events were no longer in the calendar. We will follow up with the powershell command to see if we can capture what happened. We haven't asked around to see if others are experiencing the same issue.

    • TonyRedmond's avatar
      TonyRedmond
      MVP
      Jun 06, 2017

      Did you apply a retention policy to the group by any chance?  A retention policy will remove items after they are a certain age...

      • Joseph Atwell's avatar
        Joseph Atwell
        Copper Contributor
        Aug 15, 2017

        Hi Tony, We did look into retention policies and nothing has been enabled at this point. We saw some future events were deleted as well...

  • VasilMichev's avatar
    VasilMichev
    MVP
    Jun 06, 2017

    There is no way to enable auditing on the underlying mailbox that I know of, thus we are unable to capture item-level events for Groups. TonyRedmond might know better...

    • TonyRedmond's avatar
      TonyRedmond
      MVP
      Jun 06, 2017

      Are the deleted calendar items in the Recoverable Items folder or Deleted Items folder? You can run Get-MailboxFolderStatistics against the group mailbox to see how many items are in these folders and if it seems that there might be some there, you can run a content search against the mailbox to find the items and export them to a PST. You then have the items - but as mailbox auditing is not supported for a group mailbox, you can't find out who removed them.

Resources