Networks

Ask something
Discussion Locked

SOMEBODY DELETE FILES FROM A SHARE FOLDER!!!!

0 helpful
7 replies

by e-waves

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

It's the second time within a month that i lost files from share folder on a server that i have under my service.
The server runs win server 2003 with a domain and workgroup users, and i have a common folder that users can share files.
Yesterday they told me that some files gone.
I would like to know if there is a way to find out who did this. Maybe the event's lists can help me??
If i had a recovery software would i knew who delete the files?

7 replies

by charliespencer

Second, restore the files from your backups. You do have backups, don't you?

Third, restrict the folder to only those who need it.

Fourth, turn on auditing. It's going to require some overhead, so target only the folder you're having problems with. The event log will not have this sort of detail by default.

by jeff7181

Not only restrict access to the folder, restrict what the users who do have access to it can do... like not delete or modify files they don't own.

by w2ktechman

enable volume shadow copy. Users can do the work to recover their own errors :D

Well, better yet, you can do it faster than loading the backup tapes.

by charliespencer

His other three posts linked to his product. Apparently he forgot the link on this one, sparing it the button.

by jedwards33

It may be worth it for you to invest in a third-party solution like the Netwrix File Server change reporter. The File Server Change Reporter will automatically detect any file server change made, and tell you who made each change, as well as when, where and what was modified or deleted.
The solution generates automated reports about all modifications to the file servers for your review, including changes made to files, folders, shares, and permissions with before and after values of certain configuration values. Another useful feature of this product is integration with Volume Shadow Copy service that allows you to recover some files

This discussion is closed to new replies.