The “SHAREPOINT\system” value in the “Who” column

SharePoint
6.5 and older
7.0-8.5
9.0-9.7
9.8
https://kb.netwrix.com/146
Copy Article URL Copied

The following changes are reported as the “SHAREPOINT\system” value in the “Who” column:

  • Changes made by an account which belongs to Farm Admins;
  • Changes made by an account which is a Managed account for the Web Application Pool;
  • Changes made by an account which is specified in the User Policy of the modified Web Application with the “Account operates as System” option enabled;
  • Changes resulting from SharePoint Workflows.
Go Up