Is there a log file where we can see if users try to access sites/pages they don't have access to or that haven't been shared with them?


The SharePoint log preserve some information related to Unauthorized Access Tries that saved in the log file as "Sending HTTP response 401 - text/plain:401 UNAUTHORIZED"

But, Unfortunately, the UserIdentityName is not preserved, it showed as null.

The entry log for Unauthorized Access looks like:

07/12/2017 12:03:23.34  w3wp.exe (0x464C)     0x2398 SharePoint Foundation          General  b6p2 Medium   Sending HTTP response 401 - text/plain:401 UNAUTHORIZED. 6b83049e-3013-f067-48e5-5bee64a22c59
| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.