Solved

Windows Share File Deletion Logging

Posted on 2009-05-13
3
596 Views
Last Modified: 2012-05-06
Am I correct in assuming that there is no logging of who deletes files from a share on Windows Sever 2003?  In other words, no record is kept of who deletes a file or when from a Windows share that contains stored user data such as Excel spreadsheets and Word documents, correct?  If I am correct, is there a tool that could be installed to provide this type of information?
0
Comment
Question by:karinerivet
  • 2
3 Comments
 
LVL 4

Accepted Solution

by:
jschweg earned 250 total points
ID: 24381530
By default there isn't anything setup that will give you this information, however by using Group Policy, you can setup an Audit Policy to flag specific files/folders for auditing, which then would be reported in the Audit Log in the Event Viewer.

http://technet.microsoft.com/en-us/library/cc787413.aspx
0
 

Author Comment

by:karinerivet
ID: 24388414
Thank you; that was exactly what I was seeking.  I applied the appropriate settings and it works exactly as desired.
0
 
LVL 4

Expert Comment

by:jschweg
ID: 24397032
No problem, just remember to try an audit only what you really need, depending on how many files/folders you are auditting you may see a performance drop with all of the added overhead.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Learn about cloud computing and its benefits for small business owners.
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question