[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


Windows 2000 server

Posted on 2005-05-03
Medium Priority
Last Modified: 2010-04-14
Can i find help from anyone...

my problem is i have logical drive in my server called project and in this driver there are folders from 1996 folder to 2005 folder..this morning when of the users claims that a lot of folders from 2003 missing i went throw the folders i found all the missing folders from 2003 in 2002 ,i don`t know if it is a virus or somebody moved them
my question is ..is there anyway to stop users to move folders from A TO B or to delete ,
or can i have the trace of anyone who did a mistake volontary or unvolontary...
thank you very much
Question by:asaidi

Expert Comment

ID: 13916118
You can do that by changin NTFS permissions on the folder. If you righ-click the folder -properties-security-advanced-select group you want to change. In the list of permissions you have "delete subfolders" If you set it to deny then they will not be able to delete folders.
LVL 16

Expert Comment

ID: 13916549
You best solution would be to implement Active Directory Users and Groups.  You can then set specific permissions for Groups of people to allow some to be able to create, edit etc, some to just save work, whilst still allowing Administrators full rights to move things.  With this you could be able to prevent User A opening User B's documents if required.

Also I think you need to ensure you have a working disaster recovery schedule running on that server.  It sounds like if it fell over you would lose 10 years work.  I have been involved with companies where they lost years of data even though they were backing up as they were using propietry backup software which we had to locate at any cost as the only copy they had was on the server (Don't you love these Manufacturers who send all their software on the drive and no accompanying CDs!!!)

LVL 10

Expert Comment

by:Seelan Naidoo
ID: 13917440
You can also enable Auditing of Files [success and failure] to track user usage.

You can either enable it through a GPO for all files servers or on just the one containing your data by using the Local Security Policy on that Server.

Start -> Administrative Tools -> Local Security Policy

Expand Local Policies -> Select Audit Policy

In the right hand pane - Select Audit Object Access [enable success and failure]

Goto a command prompt -> type secedit /refreshpolicy machine_policy

Also you need to increase your System Security log as there is going to a considerably increase in the size.
You might consider changing the way the log is handled when maximum log files size is reached.
Thses are the options:

Overwrite as needed
Overwrite events older than x Days
Do not overwrite events (clear log manually)

Once that is done,

go to the share/file/folder that needed to tracked..

Goto Properties, and Auditing Tab, specify actions and Users/groups that need to be audited.

LVL 16

Accepted Solution

Joe earned 1350 total points
ID: 13919035
Yeah i would do what wadski has mentioned if you do not already have a disaster recovery system implemented. We backup to a 1 Terabyte Lacie Firewire external drive. To set the permissions on the share folder in 2000 server right click on it and set the permissions for each specific user. Right click on the share folder> Properties > Sharing > Select the permissions tab > Then you can edit each user you want to just be able to read from the directory or have full control. Hope this helps

LVL 16

Expert Comment

ID: 13919057
Sorry did not  know if you have got AD or not

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article will help to fix the below errors for MS Exchange Server 2016 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
Suggested Courses
Course of the Month18 days, 21 hours left to enroll

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question