MS team showing wrong user activity

Question

Teams is showing an user had modify, delete or created a file or folder. Meanwhile the user has never touch the file or folder. Initially we though by click on the refresh Button will resolve the problem, but it didn’t.  This may cause major problem and confusions within the user community. So I am asking if anyone who can  help in explaining or resolve the problem. or point me to the right direction in finding a solution

Thanks and Best regards

Chuck Juan

Answer 1

Hi Chuck,

"Teams is showing an user had modify, delete or created a file or folder."

Where did you see this information can you post screenshot here?

Although, Teams application itself can't perform those action.

"Meanwhile the user has never touch the file or folder."

It might be accidentally done by the user. Or his account has compromised, when someone other than the intended user steals the credentials, the stolen credentials are considered to be compromised. With them the attacker can sign in as the original user and perform illicit actions. Using the stolen credentials, the attacker can access the user’s Office 365 mailbox, Teams, SharePoint folders, or files in the user's OneDrive.

Reset the user Office 365 business account password. Make sure that the password is strong and that it contains upper and lowercase letters, at least one number, and at least one special character.

Keep monitor to check, if it can happen again.

Thanks,

Answer 2

Hi Chuck,

Thanks for the reply. Yes, please use the Office 365 Security & Compliance Center to search the unified audit log to view user activity at your convenience.

Best regards,

Shyamal

Answer 3

thanks for the follow up. I'll use the Office 365 Security & Compliance Center to search the unified audit log to view user and admin activity in Microsoft Teams.

Answer 4

Hi Chuck,

I'm writing to follow up on this thread. Have you referred to the information above provided by "Polly Baylis"?

However, you can use the Office 365 Security & Compliance Center to search the unified audit log to view user and admin activity in Microsoft Teams for your Office 365 organization. See Search the audit log in the Security & Compliance Center

Best regards,

Shyamal