Logging deleted files
Posted on 2006-10-31
I have a volume on one of our file servers (Server 2003 Standard) where people keep deleting files and sometimes groups of folders. Now I've searched extensively for a solution using tracking events in the event manager for this type of thing, but so far have drawn a blank.
Is there any way I can track people who delete files from the file server volume, either by user name, IP or otherwise so that I can get some accountability for these actions. having to keep reverting to the tape backups is becoming a significant pain in the ass.