Audit log for Domain management

%3CLINGO-SUB%20id%3D%22lingo-sub-15518%22%20slang%3D%22en-US%22%3EAudit%20log%20for%20Domain%20management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-15518%22%20slang%3D%22en-US%22%3E%3CP%3EAre%20there%20any%20audit%20logs%20available%20for%20activities%20related%20to%20the%20management%20of%20DNS%20records%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe've%20just%20discovered%20an%20incident%20where%20all%20of%20our%20customer's%20custom%20%23DNS%20records%20for%20every%20single%20one%20of%20our%20%23domains%20managed%20in%20Office%20365%20Admin%20Center%20have%20dissappeared%20and%20we%20can't%20tell%20if%20this%20was%20a%20system%20issue%20or%20if%20a%20user%20did%20this.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%2C%20is%20there%20any%20recommended%20governance%20and%20reporting%20around%20the%20management%20of%20Domains.%20I'd%20like%20to%20avoid%20this%20situation%20in%20future%20because%20it%20effectively%20means%20all%20our%20customer's%20websites%20went%20down.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-15518%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAdmin%20center%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-17484%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20log%20for%20Domain%20management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-17484%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20to%20hear%20that%20you%20were%20able%20to%20solve%20this.%20I've%20shared%20your%20feedback%20with%20our%20engineering%20team.%3C%2FP%3E%0A%3CP%3EThanks%2C%3C%2FP%3E%0A%3CP%3EAnne%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-17240%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20log%20for%20Domain%20management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-17240%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F210%22%20target%3D%22_blank%22%3E%40Anne%20Michels%3C%2FA%3E%26nbsp%3BI%20appreciate%20the%20offer.%20We've%20manage%20to%20resolve%20the%20issues%20finally%2C%20but%20we're%20still%20unsure%20if%20this%20was%20caused%20by%20a%20system%20failure%20or%20by%20a%20person.%20My%20main%20thought%20would%20be%20that%20this%20sort%20of%20change%20has%20potentially%20desastrous%20affects%20on%20a%20client%20and%20I'm%20surprised%20that%20there's%20nothing%20in%20place%20to%20audit%20these%20actions.%20This%20incident%20caused%20outages%20for%204%20of%20this%20companies%20public%20facing%20websites%20for%20two%20days.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-16718%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20log%20for%20Domain%20management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-16718%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Jacques%2C%3C%2FP%3E%0A%3CP%3Ewe%20currently%20don't%20have%20and%20audit%20for%26nbsp%3Bactivities%20related%20to%20the%20management%20of%20DNS%20records.%20We%20also%20don't%20have%20recommended%20governance%20or%20reporting%20around%20the%20management%20of%20domains%20as%20we%20have%20not%20received%20this%20request%20from%20many%20customers%20yet.%3C%2FP%3E%0A%3CP%3EWe're%20happy%20to%20look%20into%20your%20case.%20Can%20you%20please%20send%20us%20your%20tenant%20ID%20and%20domains%3F%20You%20can%20send%20it%20to%20me%20via%20email%20anne.michels(%40)microsoft.com%20and%20we'll%20investigate%20further%20on%20our%20side.%3C%2FP%3E%0A%3CP%3EThanks%2C%3C%2FP%3E%0A%3CP%3EAnne%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-16710%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20log%20for%20Domain%20management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-16710%22%20slang%3D%22en-US%22%3E%3CP%3EI%20haven't%20seen%20such%20events%20in%20the%20logs%2C%20the%20documentation%20doesn't%20seem%20to%20list%20anything%20relevant%20too.%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F210%22%20target%3D%22_blank%22%3E%40Anne%20Michels%3C%2FA%3Emight%20be%20able%20to%20share%20something.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Are there any audit logs available for activities related to the management of DNS records? 

 

We've just discovered an incident where all of our customer's custom #DNS records for every single one of our #domains managed in Office 365 Admin Center have dissappeared and we can't tell if this was a system issue or if a user did this. 

 

Also, is there any recommended governance and reporting around the management of Domains. I'd like to avoid this situation in future because it effectively means all our customer's websites went down. 

4 Replies

I haven't seen such events in the logs, the documentation doesn't seem to list anything relevant too. @Anne Michels might be able to share something.

 

 

Hi Jacques,

we currently don't have and audit for activities related to the management of DNS records. We also don't have recommended governance or reporting around the management of domains as we have not received this request from many customers yet.

We're happy to look into your case. Can you please send us your tenant ID and domains? You can send it to me via email anne.michels(@)microsoft.com and we'll investigate further on our side.

Thanks,

Anne

Thanks @Anne Michels I appreciate the offer. We've manage to resolve the issues finally, but we're still unsure if this was caused by a system failure or by a person. My main thought would be that this sort of change has potentially desastrous affects on a client and I'm surprised that there's nothing in place to audit these actions. This incident caused outages for 4 of this companies public facing websites for two days. 

Great to hear that you were able to solve this. I've shared your feedback with our engineering team.

Thanks,

Anne