Questions

Folders were moved on server and my IT person says he can't trace who did

Tags: Security, Networking, Community
+
0 Votes

Folders were moved on server and my IT person says he can't trace who did

PHRATE
My folders were moved on our server and my IT guy says he can't figure out who moved or renamed the folders and gave access to those folders to "everyone". Now the entire staff has access to personnel folders with social security numbers and applications and personal information on employees including salary history, etc. Why is my IT guy saying he has no idea how this happened and that there is no way he can determine who moved those file folders?

Member Answers

    • +
      0 Votes
      markp24

      he could say that for a few reasons:
      1) he doesnt want to search an extensive log
      2) HR may need to give approval to review logs due to company policy
      3) Auditing is is Disabled and turned off for Filesystem modifications

      but norally yes you should be able to trace that as said the the prior post.

      +
      0 Votes
      Sawan Gupta

      On a Windows server system logs be checked for the timestamp when the folder was moved and it can be determined who all were logged on to that system at that time.

    • +
      0 Votes
      Sawan Gupta

      On a Windows server system logs be checked for the timestamp when the folder was moved and it can be determined who all were logged on to that system at that time.

      +
      0 Votes
      markp24

      he could say that for a few reasons:
      1) he doesnt want to search an extensive log
      2) HR may need to give approval to review logs due to company policy
      3) Auditing is is Disabled and turned off for Filesystem modifications

      but norally yes you should be able to trace that as said the the prior post.