Solved

Windows Share File Deletion Logging

Posted on 2009-05-13
3
597 Views
Last Modified: 2012-05-06
Am I correct in assuming that there is no logging of who deletes files from a share on Windows Sever 2003?  In other words, no record is kept of who deletes a file or when from a Windows share that contains stored user data such as Excel spreadsheets and Word documents, correct?  If I am correct, is there a tool that could be installed to provide this type of information?
0
Comment
Question by:karinerivet
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 4

Accepted Solution

by:
jschweg earned 250 total points
ID: 24381530
By default there isn't anything setup that will give you this information, however by using Group Policy, you can setup an Audit Policy to flag specific files/folders for auditing, which then would be reported in the Audit Log in the Event Viewer.

http://technet.microsoft.com/en-us/library/cc787413.aspx
0
 

Author Comment

by:karinerivet
ID: 24388414
Thank you; that was exactly what I was seeking.  I applied the appropriate settings and it works exactly as desired.
0
 
LVL 4

Expert Comment

by:jschweg
ID: 24397032
No problem, just remember to try an audit only what you really need, depending on how many files/folders you are auditting you may see a performance drop with all of the added overhead.
0

Featured Post

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question