?
Solved

Who deleted my folders?

Posted on 2004-10-13
3
Medium Priority
?
155 Views
Last Modified: 2010-04-14
A friend of mine (at my old job) has a Windows 2000 server network with a file server that hosts all of the shared data between branches.  Somehow yesterday a bunch of very important files/folders got deleted...they have a tape backup, so nothing is lost, but he would like to find out who did the delete as it was probably maliciously done.  Any idea of how to do that if we didn't have any third party software installed?
0
Comment
Question by:rustyrpage
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 18

Accepted Solution

by:
luv2smile earned 2000 total points
ID: 12298394
Unless they had Auditing Files and Folders setup, then the comptuer won't have a record of who deleted a file/folder.

If you think you got hacked then look thru all the event logs that you do have to see if anything looks unusual.
0
 
LVL 6

Author Comment

by:rustyrpage
ID: 12298472
Not hacked...it was internal.

So without the auditing then we're pretty much out of luck
0
 
LVL 3

Expert Comment

by:TRobertson
ID: 12298600
I will agree on that, unless you have auditing turned on Win2k will not log file and folder activity such as deletions.

If you think it may happen again I would request to have auditing turned on for your folders.
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
What's worse than having your data encrypted by ransomware? Getting attacked by a so-called "wiper," which simply destroys the data and offers you no hope of ever seeing it again.
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question