There will come a time when you need to determine who created, modified or deleted a collection. Here is a quick and easy method to get this information from ConfigMgr.
- Click on Monitoring.
- Expand Reporting and click on Reports.
- Right-click ‘All messages for a specific message ID’ and select Run.
- Click Values.
- Enter the Message ID based on what you are looking for.
30015 – user created collection
30016 – user modified collection
30017 – user deleted a collection
- Select the Message ID from the list and click Ok.
- Click View Report.
- This report will show you the user, collection and time of the change.