Solved

How to see who delete files?

Posted on 2007-12-06
3
374 Views
Last Modified: 2012-05-05
Hi Experts,
My client have a server width windows 2003 server.About 20 computers connect to the server to access some files. Yesterday someone delete an important folder from the server, and i want to know if windows register in a log these events and the way to find the user or machine which delete the file.
0
Comment
Question by:naex
3 Comments
 
LVL 23

Expert Comment

by:Iamthecreator
ID: 20421061
There are deleted file recovery programs
like http://www.snapfiles.com/get/restoration.html to help in these
circumstances.
0
 

Author Comment

by:naex
ID: 20421134
Thank you very much. I have already restored the files, but now i want to find the person who did it, because of that i need a way to find that kind of information in a log
Thanks for your comment
0
 

Accepted Solution

by:
jski6671 earned 500 total points
ID: 20421250
If you have auditing turned on you can go to your event viewer under computer management and check the security log.
0

Featured Post

Why spend so long doing email signature updates?

Do you spend loads of your time carrying out email signature updates? Not very interesting are they? Don’t let signature updates get you down. Let Exclaimer Cloud - Signatures for Office 365 make managing email signatures a breeze.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
local administrator password solution 26 79
smartboard connectivity and software 6 37
forensics tools for file amendments/associations 2 65
adobe premier render 10 41
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now