You need to identify which files were modified by which users in the user’s OneDrive. What should you do?

November 13, 2021 by Admin

You have a Microsoft 365 E5 subscription.

A user reports that changes were made to several files in Microsoft OneDrive.

You need to identify which files were modified by which users in the user’s OneDrive.

What should you do?

  • From the Azure Active Directory admin center, open the audit log
  • From the OneDrive admin center, select Device access
  • From Microsoft 365 Compliance, perform an eDiscovery search
  • From Microsoft Cloud App Security, open the activity log 

Leave a Reply