How to see who delete files?

Hi Experts,
My client have a server width windows 2003 server.About 20 computers connect to the server to access some files. Yesterday someone delete an important folder from the server, and i want to know if windows register in a log these events and the way to find the user or machine which delete the file.
naexAsked:
Who is Participating?
 
jski6671Connect With a Mentor Commented:
If you have auditing turned on you can go to your event viewer under computer management and check the security log.
0
 
Iamthecreator OMAdministrateur Systeme et ReseauxCommented:
There are deleted file recovery programs
like http://www.snapfiles.com/get/restoration.html to help in these
circumstances.
0
 
naexAuthor Commented:
Thank you very much. I have already restored the files, but now i want to find the person who did it, because of that i need a way to find that kind of information in a log
Thanks for your comment
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.