• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 190
  • Last Modified:

Deleted Files

How can I know which user have deleted particular file from the network drive he was mapped to. I need a software which can tell me which tells me the person userID as soon as he press the delete key on the keyoard to delete the file on the network.
0
tsultan
Asked:
tsultan
1 Solution
 
oBdACommented:
You need to enable auditing for this file or folder; check here for a detailed description on how to do that:
How to enable and apply security auditing in Windows 2000
http://support.microsoft.com/?kbid=300549
Note that this will only work for future attempts to delete a file; if auditing hasn't been enabled, there's no way to retrospectively find out who deleted a file.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now