Showing posts with label audit. Show all posts
Showing posts with label audit. Show all posts

Monday, December 18, 2017

SharePoint Deletion Log

SharePoint has a powerful report for file deletion in SharePoint 2016 / 2013.

Under Site Collection Administration > Site Collection Audit Settings
Turn on all events needed for audit, but remember this will significatly increase the size of your content database.

So consider turning on Audit Log Trimming which is end of the month by default
https://support.office.com/en-US/article/Configure-audit-settings-for-a-site-collection-F5A346D0-EE0F-4412-A5E6-D9B5ABAA1012

Delete Audit Report Report Data

Next, lets create some activity using built-in document library.

Add and delete document.

Back to Site Collection Administration > Audit Log Reports > Deletion
 Save report (Suggestion: Create a new document library for audting)

Open Report using Excel or Excel Web App

Auditing in SharePoint

Articles

SharePoint 2016


Excel Import Permissions
http://www.sharepointdiary.com/2015/05/export-sharepoint-users-and-group-permissions-to-excel.html
Audit Specific Event ID Function
https://howtodowithsharepoint.wordpress.com/2016/11/26/sharepoint-20162013-event-log-monitoring-by-automation/

Configure audit settings for a site collection (2016)
https://support.office.com/en-us/article/Configure-audit-settings-for-a-site-collection-A9920C97-38C0-44F2-8BCB-4CF1E2AE22D2
More from The Cloud EngineerSharepoint Deletion Log
http://thecloudengineer.blogspot.com/2016/03/sharepoint-deletion-log.html

Office 365

Office 365 Audit Logging
https://www.petri.com/office-365-audit-logging-generates-data

SharePoint Legacy

SharePoint 2013

Enables auditing of how site collections, sites, lists, folders, and list items are accessed, changed, and used
https://msdn.microsoft.com/en-us/library/ms441917.aspx

SharePoint Server 2013 custom audit log report - PowerShell script
https://gallery.technet.microsoft.com/office/SharePoint-Server-2013-9657c24e
Using PowerShell Scripts to Implement SharePoint Audit Logging (part 1 and part 2)
http://www.coyotecrk.com/using-powershell-scripts-implement-sharepoint-audit-logging-part-1/
http://www.coyotecrk.com/using-powershell-scripts-implement-sharepoint-audit-logging-part-2/
View and configure usage analytics reports in SharePoint Server 2013
https://blogs.technet.microsoft.com/tothesharepoint/2014/01/23/view-and-configure-usage-analytics-reports-in-sharepoint-server-2013/
Auditing - A Built-in Feature of SharePoint 2010
https://www.codeproject.com/articles/431342/auditing-a-built-in-feature-of-sharepoint

More Tools

SharePoint Audit Logging

https://support.office.com/en-us/article/Configure-audit-settings-for-a-site-collection-A9920C97-38C0-44F2-8BCB-4CF1E2AE22D2

https://www.ultimatewindowssecurity.com/sharepoint/default.aspx

SharePoint Deletion Log Report

http://thecloudengineer.blogspot.com/2016/03/sharepoint-deletion-log.html

SharePoint Permissions Analyzer

TechNet - SharePoint PowerShell: Get list of all users present in a site under different SharePoint Groups
http://social.technet.microsoft.com/wiki/contents/articles/31301.sharepoint-powershell-get-list-of-all-users-present-in-a-site-under-different-sharepoint-groups.aspx
https://sppermissionanalyzer.codeplex.com/

Simple SharePoint Permissions Auditing – OOTB

The question is how do I view permissions and perform a site auditing using out of the box tools.  Using PowerShell script found from fellow Buckeye SPUG member Brian Jackett, I was able to create an excel report below.
https://briantjackett.com/2013/07/01/powershell-script-to-enumerate-sharepoint-2010-or-2013-permissions-and-active-directory-group-membership/
First I needed to add the policy at the web application level.
Second I ran the script and dumped out an xml file.
Finally results displayed by using Excel import from the XML file for a small lab setup.

Displaying XML in SharePoint


http://thecloudengineer.blogspot.com/2015/11/displaying-xml-in-sharepoint.html

Auditing - A Built-in Feature of SharePoint

http://www.codeproject.com/Articles/431342/Auditing-A-Built-in-Feature-of-SharePoint

SharePoint Foundation

http://auditlogsp.codeplex.com/
2010