Link to home
Start Free TrialLog in
Avatar of asaidi
asaidi

asked on

Windows 2000 server

Hello
Can i find help from anyone...

my problem is i have logical drive in my server called project and in this driver there are folders from 1996 folder to 2005 folder..this morning when of the users claims that a lot of folders from 2003 missing i went throw the folders i found all the missing folders from 2003 in 2002 ,i don`t know if it is a virus or somebody moved them
my question is ..is there anyway to stop users to move folders from A TO B or to delete ,
or can i have the trace of anyone who did a mistake volontary or unvolontary...
thank you very much
Avatar of joedoe58
joedoe58

You can do that by changin NTFS permissions on the folder. If you righ-click the folder -properties-security-advanced-select group you want to change. In the list of permissions you have "delete subfolders" If you set it to deny then they will not be able to delete folders.
Avatar of Wadski
You best solution would be to implement Active Directory Users and Groups.  You can then set specific permissions for Groups of people to allow some to be able to create, edit etc, some to just save work, whilst still allowing Administrators full rights to move things.  With this you could be able to prevent User A opening User B's documents if required.

Also I think you need to ensure you have a working disaster recovery schedule running on that server.  It sounds like if it fell over you would lose 10 years work.  I have been involved with companies where they lost years of data even though they were backing up as they were using propietry backup software which we had to locate at any cost as the only copy they had was on the server (Don't you love these Manufacturers who send all their software on the drive and no accompanying CDs!!!)

You can also enable Auditing of Files [success and failure] to track user usage.

You can either enable it through a GPO for all files servers or on just the one containing your data by using the Local Security Policy on that Server.

Start -> Administrative Tools -> Local Security Policy

Expand Local Policies -> Select Audit Policy

In the right hand pane - Select Audit Object Access [enable success and failure]

Goto a command prompt -> type secedit /refreshpolicy machine_policy

Also you need to increase your System Security log as there is going to a considerably increase in the size.
You might consider changing the way the log is handled when maximum log files size is reached.
Thses are the options:

Overwrite as needed
Overwrite events older than x Days
Do not overwrite events (clear log manually)

Once that is done,

go to the share/file/folder that needed to tracked..

Goto Properties, and Auditing Tab, specify actions and Users/groups that need to be audited.



ASKER CERTIFIED SOLUTION
Avatar of Joe
Joe
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Sorry did not  know if you have got AD or not