troubleshooting Question

Microsoft Audit Log shows a wrong user id in log

Avatar of Bastiaan
BastiaanFlag for Netherlands asked on
MicrosoftMicrosoft 365
3 Comments1 Solution10 ViewsLast Modified:

If we remove users from a Microsoft Team, in the Audit Log a different user who has removed the user is shown. This way we can't be sure who has removed the Teams user. Is this default behaviour, or am I using the 'Users' field wrong? 

Search criteria:


Example given:

Admin A, removes User A from Teams A. In the audit log of Microsoft, we search for removed members in Teams. In the log, it shows that Amin B has removed User A from Teams A.

Log in to continue reading
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform for $9.99/mo
View membership options
Unlock 1 Answer and 3 Comments.
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
The Value of Experts Exchange in My Daily IT Life

Experts Exchange (EE) has become my company's go-to resource to get answers. I've used EE to make decisions, solve problems and even save customers. OutagesIO has been a challenging project and... Keep reading >>


Owner of Outages.IO
Phoenix, Arizona, United States
Member Since 2016
Join a full scale community that combines the best parts of other tools into one platform.
Unlock 1 Answer and 3 Comments.
View membership options
“All of life is about relationships, and EE has made a virtual community a real community. It lifts everyone's boat.”
William Peck

Member since 2004