Windows Forum

Ask something
Discussion Locked

Recycle Bin on network share empty?

0 helpful
3 replies

by qultptry 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
When users who are saving data on server, delete items shouldn't they go to the recycler on the share? Mine is always empty. If it should be shared, how do I set permissions so they cannot delete what's in the recycle bin. Example: Have students who are loading hacking software, using, and then deleting. Virus software picks it up, but then I can't retrieve who it came from. Any ideas on how I can find who this is? Students have used Nuke.fck and port.fck or something similar - Help.....

3 replies

by biffo

Hi?looks like the real prob is students being naughty on your system. Which is just as well because deletions on network shares go straight to heaven without stopping at the recycle bin.

What you might want to do is audit file access. This can tell you who?s accessing (or executing) which file in any subtree of folders.

To audit file access, first you have to use the Group Policy snap-in in the MMC (type MMC at the command prompt, then choose Add/Remove Snap-in?) to set the Audit ObjectAccess option to enabled.

Then, you use Explorer to secondary-click the parent folder in which you want to audit all file access attempts. (Be as specific as possible, i.e. limit the number of files to which you?re auditing access attempts?audit files can get big.) From the context menu choose Properties|Security|Advanced?|Auditing. Next, select the group or individual you suspect of naughtiness and choose the Successful check box for the Traverse Folder / Execute File option. Do all appropriate Okaying and you?re away!

Good Luck
Biffo

PS To view logged events Start|Programs|Administrative Tools|Computer Management|System Tools|Event Viewer|Security.

by qultptry

Biffo - I'm sure this will work, however where do I find the snap in for group policy. I am used to MMC for IIS, but havn't used in for any other programs, I would be most greatful for any instructions on where and how to install? Thank you thank you! email me at qultptry@frontiernet.net

This discussion is closed to new replies.