Windows Share File Deletion Logging

Am I correct in assuming that there is no logging of who deletes files from a share on Windows Sever 2003?  In other words, no record is kept of who deletes a file or when from a Windows share that contains stored user data such as Excel spreadsheets and Word documents, correct?  If I am correct, is there a tool that could be installed to provide this type of information?
karinerivetAsked:
Who is Participating?
 
jschwegConnect With a Mentor Commented:
By default there isn't anything setup that will give you this information, however by using Group Policy, you can setup an Audit Policy to flag specific files/folders for auditing, which then would be reported in the Audit Log in the Event Viewer.

http://technet.microsoft.com/en-us/library/cc787413.aspx
0
 
karinerivetAuthor Commented:
Thank you; that was exactly what I was seeking.  I applied the appropriate settings and it works exactly as desired.
0
 
jschwegCommented:
No problem, just remember to try an audit only what you really need, depending on how many files/folders you are auditting you may see a performance drop with all of the added overhead.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.