How to find the user deleted the shared folder

By gc1986 ·
Is there any way to find the domain user/workstation details in which shared folder was deleted via network path.


Are there any ways to enable the logs for these type of incidents.

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
Thread display: Collapse - | Expand +

All Answers

Collapse -

Enable Object Auditing for Folders

by robo_dev In reply to How to find the user dele ...

As far as I know, unless auditing is enabled, the only methods would involve forensic analysis.

While local files got through the recycle bin, networked files do not.

There would possibly be evidence on each workstation, if the user opened a file to view it before deleting it.

Keep in mind that it's possible that a user simply dragged the folder somewhere else, such as to their desktop, or to another folder on the lan drive.

Collapse -

Group Policy

by unhappyuser In reply to How to find the user dele ...

Group Policy will do a lot of things, if turned on. If you're not familiar with it, read up before you change things. You can cause a lot of damage to AD if you don't know what you're doing.


Back to Networks Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums