Networks

Ask something
Question Locked

Who delete the files?

0 helpful
3 replies

by nestor.ramirez

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a server 2K like a file server on a domain with the AD on 2003, I want to know how can i know which user delete some file on the shared folders.

3 replies

by magic alex

isn't there a logging/audit function you can turn on?

by blackdiamond

Hey,

In group policy you can turn on auditing. You can do this on the Domain policy or on individual servers by running gpedit.msc.

If memory serves me it's under Computer Configuration-Windows Setting-Security Setting-Local Policies-Audit Policy

In Event Viewer on the Security option of the individual server is where access to files shows up. It will show deletion of files also.

Depending on Audit setting and Event viewer you can get a lot of items showing up. Our audit log gets so big that we purchased Vedit to open the really large files for better search options.

This discussion is closed to new replies.