Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 383
  • Last Modified:

How to see who delete files?

Hi Experts,
My client have a server width windows 2003 server.About 20 computers connect to the server to access some files. Yesterday someone delete an important folder from the server, and i want to know if windows register in a log these events and the way to find the user or machine which delete the file.
0
naex
Asked:
naex
1 Solution
 
Iamthecreator OMAdministrateur Systeme et ReseauxCommented:
There are deleted file recovery programs
like http://www.snapfiles.com/get/restoration.html to help in these
circumstances.
0
 
naexAuthor Commented:
Thank you very much. I have already restored the files, but now i want to find the person who did it, because of that i need a way to find that kind of information in a log
Thanks for your comment
0
 
jski6671Commented:
If you have auditing turned on you can go to your event viewer under computer management and check the security log.
0

Featured Post

Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now