Solved

Who deleted my folders?

Posted on 2004-10-13
3
154 Views
Last Modified: 2010-04-14
A friend of mine (at my old job) has a Windows 2000 server network with a file server that hosts all of the shared data between branches.  Somehow yesterday a bunch of very important files/folders got deleted...they have a tape backup, so nothing is lost, but he would like to find out who did the delete as it was probably maliciously done.  Any idea of how to do that if we didn't have any third party software installed?
0
Comment
Question by:rustyrpage
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 18

Accepted Solution

by:
luv2smile earned 500 total points
ID: 12298394
Unless they had Auditing Files and Folders setup, then the comptuer won't have a record of who deleted a file/folder.

If you think you got hacked then look thru all the event logs that you do have to see if anything looks unusual.
0
 
LVL 6

Author Comment

by:rustyrpage
ID: 12298472
Not hacked...it was internal.

So without the auditing then we're pretty much out of luck
0
 
LVL 3

Expert Comment

by:TRobertson
ID: 12298600
I will agree on that, unless you have auditing turned on Win2k will not log file and folder activity such as deletions.

If you think it may happen again I would request to have auditing turned on for your folders.
0

Featured Post

Comparison of Amazon Drive, Google Drive, OneDrive

What is Best for Backup: Amazon Drive, Google Drive or MS OneDrive? In this free whitepaper we look at their performance, pricing, and platform availability to help you decide which cloud drive is right for your situation. Download and read the results of our testing for free!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This is a high-level webinar that covers the history of enterprise open source database use. It addresses both the advantages companies see in using open source database technologies, as well as the fears and reservations they might have. In this…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question