Is there a log file where we can see if users try to access sites/pages they don't have access to or that haven't been shared with them?

1 Answer 1


The SharePoint log preserve some information related to Unauthorized Access Tries that saved in the log file as "Sending HTTP response 401 - text/plain:401 UNAUTHORIZED"

But, Unfortunately, the UserIdentityName is not preserved, it showed as null.

The entry log for Unauthorized Access looks like:

07/12/2017 12:03:23.34  w3wp.exe (0x464C)     0x2398 SharePoint Foundation          General  b6p2 Medium   Sending HTTP response 401 - text/plain:401 UNAUTHORIZED. 6b83049e-3013-f067-48e5-5bee64a22c59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.