How can I know which user have deleted particular file from the network drive he was mapped to. I need a software which can tell me which tells me the person userID as soon as he press the delete key on the keyoard to delete the file on the network.
You need to enable auditing for this file or folder; check here for a detailed description on how to do that:
How to enable and apply security auditing in Windows 2000 http://support.microsoft.com/?kbid=300549
Note that this will only work for future attempts to delete a file; if auditing hasn't been enabled, there's no way to retrospectively find out who deleted a file.
0
Question has a verified solution.
Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.
How to enable and apply security auditing in Windows 2000
http://support.microsoft.com/?kbid=300549
Note that this will only work for future attempts to delete a file; if auditing hasn't been enabled, there's no way to retrospectively find out who deleted a file.