Solved

SharePoint 2010

Posted on 2013-05-20
5
158 Views
Last Modified: 2013-10-24
We have SharePoint 2010 deployed. Recently, we have a case whereby, the certain subsite was accidently deleted automatically. My boss ask me to find out who did it.

I'm googling and some comment say need to find out the log at deleteweb.aspx in IIS log. I have no idea about where to search for.
0
Comment
Question by:suriyaehnop
  • 3
  • 2
5 Comments
 
LVL 44

Expert Comment

by:Rainer Jeschor
ID: 39183377
Hi,
if your server is Windows 2008 R2:
open IIS Manager, navigate to "Sites". In the main area you should see the list of sites. Search the entry for your SharePoint site and note the ID.
Then select then your SharePoint IIS site in the left navigation.
In the main area you should have an icon for "Logging" (6th last entry) - double click it. Now you should see the folder/root folder where IIS is logging to.

Now open that folder in Windows Explorer. It could contain all IIS sites logging therefore you can use the ID of the site (noted in the first step) to get the right subfolder.
And from here just search for the string "deleteweb.aspx" to get the line(s). The seventh column should then contain the user id.

HTH
Rainer
0
 
LVL 44

Expert Comment

by:Rainer Jeschor
ID: 39183378
Another question: could you restore the site from the SharePoint recycle bin?
http://technet.microsoft.com/en-us/library/hh272539%28v=office.14%29.aspx
0
 
LVL 18

Author Comment

by:suriyaehnop
ID: 39183414
HI Rainer,

The site had restored before using the command line but on Friday last weekend, it was deleted again. My boss asked me to who the culprit is? It is similiar someone sechedule the job to delete the subsite.

Is the ID changed after we did restoration? As i checked, the ID is 2197xxxxx, the logging path is %systemdrive%inetpub\logs\logfiles which is at C:\ drive.

When i went the directory, the only log available is under foldername W3SVC1819362277. 1819362277 is ID for another site not the deleted one.
0
 
LVL 44

Accepted Solution

by:
Rainer Jeschor earned 400 total points
ID: 39183912
Hi,
in your initial question you were talking about sites/subsites hence a restore should not change the ID of the IIS site (which is the SharePoint web application). Perhaps IIS logging is not enabled for that web app therefore no subfolder.
Another option could be, to run a query on the SharePoint content DB:
http://wssmossstuff.blogspot.de/2012/04/who-deleted-that-web-site.html

Important: it is not recommended nor supported from MS to access the SharePoint SQL databases directly - but in this case as you really do just ONE temporary READ so it should be OK.

HTH
Rainer
0
 
LVL 18

Author Comment

by:suriyaehnop
ID: 39183964
The log is enabled.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
.Net Web Site IIS Web.Config Content-Security-Policy 1 60
WebSite Direction 1 38
TLS/SSL Diable 3DES ciper suites 4 27
SharePoint Explorer Folder Access 4 35
Microsoft SharePoint Foundation 2010 and Microsoft SharePoint Server 2010 do not offer the option to configure the location of the SharePoint diagnostic trace log files during installation.  This can, however, be configured through Central Administr…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…
In a recent question (https://www.experts-exchange.com/questions/28997919/Pagination-in-Adobe-Acrobat.html) here at Experts Exchange, a member asked how to add page numbers to a PDF file using Adobe Acrobat XI Pro. This short video Micro Tutorial sh…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question