Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

How to see who delete files?

Posted on 2007-12-06
3
378 Views
Last Modified: 2012-05-05
Hi Experts,
My client have a server width windows 2003 server.About 20 computers connect to the server to access some files. Yesterday someone delete an important folder from the server, and i want to know if windows register in a log these events and the way to find the user or machine which delete the file.
0
Comment
Question by:naex
3 Comments
 
LVL 23

Expert Comment

by:Rahul Misra
ID: 20421061
There are deleted file recovery programs
like http://www.snapfiles.com/get/restoration.html to help in these
circumstances.
0
 

Author Comment

by:naex
ID: 20421134
Thank you very much. I have already restored the files, but now i want to find the person who did it, because of that i need a way to find that kind of information in a log
Thanks for your comment
0
 

Accepted Solution

by:
jski6671 earned 500 total points
ID: 20421250
If you have auditing turned on you can go to your event viewer under computer management and check the security log.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
save browser passwords 11 70
Problem to file 5 29
OS Selection Menu 1 47
how to count files? 4 30
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question