OneDrive Reports

[Disease]

Does anyone know how to produce an activity report for a single users OneDrive - Deletions movements etc?

[robintech]

Audit log search, it gets confusing narrowing it down though . Sometimes have to perform the action I'm looking for (created anonymous link, shared a file from their personal OneDrive and then emptied second stage recycle bin etc) on a dummy account to make sure the criteria are correct

 

https://security.microsoft.com/auditlogsearch?

https://compliance.microsoft.com/auditlogsearch?

Edited December 13, 2023 by ittech2342323

[MYK-IT]

Possibly using Microsoft Purview, if already setup / licensed for

 

Microsoft Purview > Audit > New Search

 

At a guess...

 

Date and Time Range: {specify}

Activities: filedeleted, folderdeleted {maybe others... recycled etc.)

File, Folder or Site: {url of user's onedrive}

 

Probably best to read Microsoft's own guide https://learn.microsoft.com/en-gb/purview/audit-new-search