Deleted Files

How can I know which user have deleted particular file from the network drive he was mapped to. I need a software which can tell me which tells me the person userID as soon as he press the delete key on the keyoard to delete the file on the network.
tsultanAsked:
Who is Participating?
 
oBdAConnect With a Mentor Commented:
You need to enable auditing for this file or folder; check here for a detailed description on how to do that:
How to enable and apply security auditing in Windows 2000
http://support.microsoft.com/?kbid=300549
Note that this will only work for future attempts to delete a file; if auditing hasn't been enabled, there's no way to retrospectively find out who deleted a file.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.