determine when an user got deleted from SharePoint group?

Question

_{Wednesday, July 3, 2013 8:45 PM}

Hi,

We have some AD user accounts in SharePoint group but somehow the user accounts got deleted from SharePoint group but still exist in AD.

In SharePoint 2010, how to determine when an user got deleted from SharePoint group?

Thanks,

Gary

All replies (7)

_{Monday, July 8, 2013 6:00 PM ✅Answered}

You should see it here (this is 2013, but 2010 is identical):

Trevor Seward, MCC

Follow or contact me at...
  

This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

_{Monday, July 8, 2013 6:03 PM ✅Answered}

Are you on SharePoint Server of SharePoint Foundation?

This will make a difference i you cannot see the Audit Log Reports. In case you are on the SharePoint Foundation you won't have any possibility to find out when a user is getting deleted.

Another great source you should consider to look for is: http://sharepointthomas.blogspot.co.at/2011/07/how-to-enable-audit-functionality-in.html

Kind regards
Stefan

http://www.n8d.at/blog
Follow me on Twitter: StFBauer | n8design

Microsoft Community Contributor 2011 / 2012
MCTS - SharePoint / WSS Configuration and Development

_{Wednesday, July 3, 2013 9:43 PM}

You need to enable Audit Settings in your Site Collection. This allows to monitor the edit permission changes in a site collection. After this have been enabled you can check the audit logs for any permission update.

You will find more information of the audit settings here: http://office.microsoft.com/en-001/sharepoint-server-help/configure-audit-settings-for-a-site-collection-HA102031737.aspx

Kind regards
Stefan

http://www.n8d.at/blog
Follow me on Twitter: StFBauer | n8design

Microsoft Community Contributor 2011 / 2012
MCTS - SharePoint / WSS Configuration and Development

_{Wednesday, July 3, 2013 9:55 PM}

In this audit report, how we will know when an user is deleted?

For example abc\scott got deleted from members share Point group? With this audit setting on, how we can determine when abc\scott got deleted?

_{Wednesday, July 3, 2013 11:51 PM}

You would go to Site Actions -> Site Settings -> Audit Log Reports -> Security settings (report).  The output of this report will include the actions, and on the Report Data 1 tab, you'll have the details (who did it, and what object was removed from which group ID).

But you have to have had auditing enabled prior to this occurring, otherwise the action was not saved in the audit log table.

Trevor Seward, MCC

Follow or contact me at...
  

This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

_{Friday, July 5, 2013 2:57 AM}

I did not find the option Site Actions -> Site Settings -> Audit Log Reports -> Security settings (report)

Please advise..

_{Monday, July 8, 2013 5:55 PM}

is there way to find when a user got deleted from share point group?