Link to home
Start Free TrialLog in
Avatar of zelfanet
zelfanet

asked on

Deleted file windows small business server 2008

Is it possible to see who deleted a file in Windows Small Business Server 2008? If so, how?
Avatar of ArneLovius
ArneLovius
Flag of United Kingdom of Great Britain and Northern Ireland image

not unless you have already enabled an auditing solution.
Avatar of zelfanet
zelfanet

ASKER

That sucks, are there any freeware programs that can do this?
Noe that I am aware of.
As ArneLovius stated you need to have auditing enabled, you cannot do so after the fact. Should you wish to do so for future the following outlines how to do so:
http://technet.microsoft.com/en-us/library/cc771070(v=ws.10).aspx

Kind of like who broke into my house?  Installing security cameras later doesn't help today  :-)
If I enable auditing, it will show who did what with files?
Yes, from tha that point on.  The problem with auditing is it creates very large log files as it audits every connection to a file within that folder. Enabling "Previous Versions" is an easy way to recover files if not already set up. See Previous versions about 1/2 way down the following page:
http://blogs.technet.com/b/sbs/archive/2010/03/15/work-smarter-with-offline-files-and-shadow-copy.aspx
auditing is one of those things that sounds great, but needs "active" management.

as RobWill says, it creates constantly growing log files.

I would suggest that also as RobWill has said, enabling previous versions to provide simple and easy recovery is a simpler solution, and by removing the stigmatism of doing "something wrong" people are more likely to be "open" about mistakes.

Going on a "witch hunt" is hardly ever productive.

I have on more occasions that I care to count discovered files and or folders moved to other locations as well as deleted, it usually points to a lack of staff training.
ASKER CERTIFIED SOLUTION
Avatar of JustMy2Cents
JustMy2Cents
Flag of France image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial