• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 161
  • Last Modified:

Who deleted my folders?

A friend of mine (at my old job) has a Windows 2000 server network with a file server that hosts all of the shared data between branches.  Somehow yesterday a bunch of very important files/folders got deleted...they have a tape backup, so nothing is lost, but he would like to find out who did the delete as it was probably maliciously done.  Any idea of how to do that if we didn't have any third party software installed?
0
rustyrpage
Asked:
rustyrpage
1 Solution
 
luv2smileCommented:
Unless they had Auditing Files and Folders setup, then the comptuer won't have a record of who deleted a file/folder.

If you think you got hacked then look thru all the event logs that you do have to see if anything looks unusual.
0
 
rustyrpageAuthor Commented:
Not hacked...it was internal.

So without the auditing then we're pretty much out of luck
0
 
TRobertsonCommented:
I will agree on that, unless you have auditing turned on Win2k will not log file and folder activity such as deletions.

If you think it may happen again I would request to have auditing turned on for your folders.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now