zelfanet
asked on
Deleted file windows small business server 2008
Is it possible to see who deleted a file in Windows Small Business Server 2008? If so, how?
not unless you have already enabled an auditing solution.
ASKER
That sucks, are there any freeware programs that can do this?
Noe that I am aware of.
As ArneLovius stated you need to have auditing enabled, you cannot do so after the fact. Should you wish to do so for future the following outlines how to do so:
http://technet.microsoft.com/en-us/library/cc771070(v=ws.10).aspx
Kind of like who broke into my house? Installing security cameras later doesn't help today :-)
As ArneLovius stated you need to have auditing enabled, you cannot do so after the fact. Should you wish to do so for future the following outlines how to do so:
http://technet.microsoft.com/en-us/library/cc771070(v=ws.10).aspx
Kind of like who broke into my house? Installing security cameras later doesn't help today :-)
ASKER
If I enable auditing, it will show who did what with files?
Yes, from tha that point on. The problem with auditing is it creates very large log files as it audits every connection to a file within that folder. Enabling "Previous Versions" is an easy way to recover files if not already set up. See Previous versions about 1/2 way down the following page:
http://blogs.technet.com/b/sbs/archive/2010/03/15/work-smarter-with-offline-files-and-shadow-copy.aspx
http://blogs.technet.com/b/sbs/archive/2010/03/15/work-smarter-with-offline-files-and-shadow-copy.aspx
auditing is one of those things that sounds great, but needs "active" management.
as RobWill says, it creates constantly growing log files.
I would suggest that also as RobWill has said, enabling previous versions to provide simple and easy recovery is a simpler solution, and by removing the stigmatism of doing "something wrong" people are more likely to be "open" about mistakes.
Going on a "witch hunt" is hardly ever productive.
I have on more occasions that I care to count discovered files and or folders moved to other locations as well as deleted, it usually points to a lack of staff training.
as RobWill says, it creates constantly growing log files.
I would suggest that also as RobWill has said, enabling previous versions to provide simple and easy recovery is a simpler solution, and by removing the stigmatism of doing "something wrong" people are more likely to be "open" about mistakes.
Going on a "witch hunt" is hardly ever productive.
I have on more occasions that I care to count discovered files and or folders moved to other locations as well as deleted, it usually points to a lack of staff training.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.