Solved

How to see who delete files?

Posted on 2007-12-06
3
372 Views
Last Modified: 2012-05-05
Hi Experts,
My client have a server width windows 2003 server.About 20 computers connect to the server to access some files. Yesterday someone delete an important folder from the server, and i want to know if windows register in a log these events and the way to find the user or machine which delete the file.
0
Comment
Question by:naex
3 Comments
 
LVL 23

Expert Comment

by:Iamthecreator
ID: 20421061
There are deleted file recovery programs
like http://www.snapfiles.com/get/restoration.html to help in these
circumstances.
0
 

Author Comment

by:naex
ID: 20421134
Thank you very much. I have already restored the files, but now i want to find the person who did it, because of that i need a way to find that kind of information in a log
Thanks for your comment
0
 

Accepted Solution

by:
jski6671 earned 500 total points
ID: 20421250
If you have auditing turned on you can go to your event viewer under computer management and check the security log.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

This article is an update and follow-up of my previous article:   Storage 101: common concepts in the IT enterprise storage This time, I expand on more frequently used storage concepts.
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now