SOLVED

Admin log, guest access, Org wide settings

%3CLINGO-SUB%20id%3D%22lingo-sub-1758012%22%20slang%3D%22en-US%22%3EAdmin%20log%2C%20guest%20access%2C%20Org%20wide%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1758012%22%20slang%3D%22en-US%22%3E%3CP%3EHi!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20like%20to%20know%20who%20modified%20a%20settings%20under%20%22org%20wide%20settings%22!%3C%2FP%3E%3CP%3E%26nbsp%3BIs%20there%20any%20chance%20to%20find%20it%20the%20logs%3F%20I%20have%20searched%20in%20the%20logs%2C%20but%20i%20didnt%20find%20any%20relevant%20information%20about%20it.%3C%2FP%3E%3CP%3EWould%20it%20be%20that%20is%20not%20logged%20by%20the%20system%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1758012%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdministrator%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESettings%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1759428%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20log%2C%20guest%20access%2C%20Org%20wide%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1759428%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F570036%22%20target%3D%22_blank%22%3E%40Icsab%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHi%2C%20you%20should%20be%20able%20to%20view%20this%20in%20the%20Audit%20log%20via%20the%20Security%20%26amp%3B%20Compliance%20Center%20at%20%3CA%20href%3D%22https%3A%2F%2Fprotection.office.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprotection.office.com%3C%2FA%3E%26nbsp%3Band%20navigating%20to%26nbsp%3B%3CSTRONG%3ESearch%20%26gt%3B%20Audit%20Log%20Search.%26nbsp%3B%26nbsp%3B%3C%2FSTRONG%3EThen%20you%20can%20search%20the%20audit%20log%20as%20shown%20below.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202020-10-08%20at%2016.13.52.png%22%20style%3D%22width%3A%20944px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F225148i1E18209670891F66%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Screenshot%202020-10-08%20at%2016.13.52.png%22%20alt%3D%22Screenshot%202020-10-08%20at%2016.13.52.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1771562%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20log%2C%20guest%20access%2C%20Org%20wide%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1771562%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20your%20prompt%20answer!%3C%2FP%3E%3CP%3EIs%20it%20possibly%20that%20our%20A1%20licence%20is%20not%20enough%20to%20search%20this%20part%20of%20the%20logs%3F%3C%2FP%3E%3CP%3EOr%20first%20of%20all%20we%20have%20turn%20on%20audit%20log%20or%20something%20advanced%20logging%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20checked%20this%20filter%20option%20under%20Teams%20activities%2C%20but%20I%20did%20not%20anything%2C%20it%20is%20completely%20empty!%3C%2FP%3E%3CP%3EAnd%20I%20sure%20some%20option%20was%20changed%20last%20week%20(by%20me%20and%20my%20colleagues%20)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESorry%20for%20the%20Hungarian%20printscreens!%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Icsab_0-1602512375169.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F226005i66B531D229166D4B%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Icsab_0-1602512375169.png%22%20alt%3D%22Icsab_0-1602512375169.png%22%20%2F%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Icsab_1-1602512386804.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F226006i123865763B06E307%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Icsab_1-1602512386804.png%22%20alt%3D%22Icsab_1-1602512386804.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi!

 

I would like to know who modified a settings under "org wide settings"!

 Is there any chance to find it the logs? I have searched in the logs, but i didnt find any relevant information about it.

Would it be that is not logged by the system?

 

 

3 Replies
Highlighted
Best Response confirmed by ThereseSolimeno (Microsoft)
Solution

@Icsab 

 

Hi, you should be able to view this in the Audit log via the Security & Compliance Center at https://protection.office.com and navigating to Search > Audit Log Search.  Then you can search the audit log as shown below.

 

Screenshot 2020-10-08 at 16.13.52.png

Highlighted

@PeterRising 

 

Thank you for your prompt answer!

Is it possibly that our A1 licence is not enough to search this part of the logs?

Or first of all we have turn on audit log or something advanced logging?

 

I checked this filter option under Teams activities, but I did not anything, it is completely empty!

And I sure some option was changed last week (by me and my colleagues )

 

Sorry for the Hungarian printscreens!

Icsab_0-1602512375169.pngIcsab_1-1602512386804.png

 

Highlighted

@Icsab 

 

Hi, if you have got as far as you have, then your auditing is already active.

 

Have a check of this article - https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compl...

 

It shows you all the requirements to use the audit log.