Mighty_Ed
asked on
How to obtain user's file transaction log?
I have a user who had 15 Gb on one of the servers. I just took one print screen as an evidence, now the owner wants to have a "complete description" about this information.
I wonder if there's anyway to see a log either when I deleted the files or when this user copy them into the server.
It's a DELL PowerEdge 2800 running on Windows Server 2003 standard
Thanks in advance experts
I wonder if there's anyway to see a log either when I deleted the files or when this user copy them into the server.
It's a DELL PowerEdge 2800 running on Windows Server 2003 standard
Thanks in advance experts
not unless you have folder auditing enabled, if you didnt, then there is nothing you can view unfortunately
Well, you can always turn on file auditing, but I'm not sure if that's what you're after..
How about something like this: http://www.scriptlogic.com/products/securityexplorer/
How about something like this: http://www.scriptlogic.com/products/securityexplorer/
ASKER
How can I turn File auditing on?
Does it consume resources?
The file transactions in this server are huge
Does it consume resources?
The file transactions in this server are huge
Yeah, I don't think you want file auditing - it would give you a good idea who deleted what, from where, and when, but it's cumbersome to sort through to find anything specific...
ASKER
so you suggest to turn it on or not?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ouch :( , file auditing will fill your logs up damn quickly be careful