Is there a way in MOSS 2007 to determine who has deleted a site collection? From my understanding you can use the Audit Logs of a Site Collection to see what was deleted but where do I look, if there is somewhere, to see who deleted the site collection itself. I have looked in the "C:\Program Files\Common Files\Microsoft Shared\web server\extensions\12\LOGS" but can't find anything related to the deletion. My current diagnotic log settings for "Administration" assuming that is the correct category are set to Event Log: Error and Trace Log: Medium. Thank you, Don

The Usage analysis logging would need to be enabled on the SharePoint Server through Central Administration. If the SharePoint Timer Job has not run and the transaction logs are still there then we can find out the data from SQL. For Best practice start the Usage Analysis Logging or Start the Reporting Service. Or else check in the Recycle bin of SharePoint Site in the Farm administrator account.Fred Ellis - MSFT - "Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread."

Hi Fred, can you provide more detail on how to find this info from within SQL Server? Thanks