General discussion

Locked

Prove who deleted and/or created files

By MBR2 ·
I have a question that I hope someone can answer.
I need to see if there is a way to prove if and when someone cretaed or deleted files from a NW5 server. I know that you can go into the Netware Administrator and view when files and folders were created. The problem with that is you can modify these dates and owners. An employee is claiming that he/she never cretaed or deleted certain files and we are saying he/she did. I have to prove beyond a doubt as to when files, folders, user objects were created and show that they could not have been modified by anyone.

Anybody have any suggestions as to what the best way to go about this is?

Thanks in advance!

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by pierrejamme In reply to Prove who deleted and/or ...

You probably won't be able to prove this. for starters, if anyone knows her password. For instance you or any other Admin, you could have done it. Setting up strong passwords and then forcing a change periodically is the only way this type of case can be proven. All they have to do is say oh, I shared my password with the new employee before they were set up on the network.
Do you have Auditcon setup and running, probably not it was a bad program. Dsmeter from VisualClick is a good alternative that I am investigating or you can use NsureLogin. But it doesn't sound like any of those are in place.

Sounds like you will have to swallow this one, restore from backup and review your User Rights. if you don't want them deleted or created remove rights from that directory. NDS has massive potential for controlling this kind of thing down to a single file even.

good Luck,
Peter

Collapse -

by MBR2 In reply to

Poster rated this answer.

Collapse -

by SandyC In reply to Prove who deleted and/or ...

Another way is to utilize "filer", this command goes back to Netware 3 days and it still works with Netware 5. Filter is located on the sys volume in the public directory. Once you are in the program you will need to use your keyboard, no mouse, old program, but it is great.

Collapse -

by MBR2 In reply to

Poster rated this answer.

Collapse -

by MBR2 In reply to Prove who deleted and/or ...

This question was closed by the author

Back to Networks Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums