How To Check Who Has Deleted The SharePoint Site

Are you wondering how to find out who deleted your SharePoint site? In this section, we will walk you through the process of checking and identifying the user who deleted the site.

To check who has deleted a SharePoint site, you can follow these steps:

  1. Login to SharePoint Online Admin Center.
  2. Expand Sites and click on the “Deleted Sites” link.
  3. Alternatively, in the classic Admin Center, go to the “Site Collections” link and click on the “Recycle Bin” icon.
  4. Here, you can either restore or permanently delete the site collection.
  5. You can also use PowerShell or PnP PowerShell to get a list of deleted sites.
  6. In SharePoint Online, use the command “Get-SPODeletedSite” to list all deleted sites.
  7. In PnP PowerShell, use the command “Get-PnPTenantRecycleBinItem” to list deleted sites.
  8. To find out who has deleted a SharePoint Online site collection, go to the Office 365 Security & Compliance Center.
  9. Expand search, click on Audit Log Search, and select the Activities as “Deleted site”.
  10. Set the date parameters accordingly and hit search.
  11. This will provide you with a list of deleted sites along with the username of the person who deleted the site.

Please note that sites may be deleted as part of site policies, Office 365 group deletion, etc.

Steps to Check Deleted SharePoint Site

Now that you understand the importance of tracking deleted SharePoint sites, let’s dive into the step-by-step process to check for deleted sites and identify the responsible user.

To begin, you need to login to the SharePoint Online Admin Center. Once logged in, expand the “Sites” section and click on the “Deleted Sites” link. If you are using the classic Admin Center, you can go to the “Site Collections” link and click on the “Recycle Bin” icon.

Within the Deleted Sites or Recycle Bin, you have the option to either restore or permanently delete the site collection. Take note that once the site collection is permanently deleted, it cannot be recovered.

Another method to check for deleted SharePoint sites is by using PowerShell or PnP PowerShell. In SharePoint Online, you can use the command “Get-SPODeletedSite” to list all deleted sites. In PnP PowerShell, the command “Get-PnPTenantRecycleBinItem” will provide you with a similar list.

To find out who has deleted a SharePoint Online site collection, navigate to the Office 365 Security & Compliance Center. Expand the search, click on Audit Log Search, and select the Activities as “Deleted site”. Set the date parameters accordingly and hit search. You will be presented with a list of deleted sites, along with the username of the person who deleted the site.

It is important to note that sites may be deleted as part of site policies or Office 365 group deletion. By following these steps, you can effectively track and identify who has deleted a SharePoint site, ensuring accountability and security within your organization.

Meet the Author

Abdul Rahim has been working in Information Technology for over two decades. Learn how Abdul got his start as a Tech Blogger , and why he decided to start this Software blog. If you want to send Abdul a quick message, then visit his contact page here.