?
Solved

Windows Share File Deletion Logging

Posted on 2009-05-13
3
Medium Priority
?
600 Views
Last Modified: 2012-05-06
Am I correct in assuming that there is no logging of who deletes files from a share on Windows Sever 2003?  In other words, no record is kept of who deletes a file or when from a Windows share that contains stored user data such as Excel spreadsheets and Word documents, correct?  If I am correct, is there a tool that could be installed to provide this type of information?
0
Comment
Question by:karinerivet
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 4

Accepted Solution

by:
jschweg earned 1000 total points
ID: 24381530
By default there isn't anything setup that will give you this information, however by using Group Policy, you can setup an Audit Policy to flag specific files/folders for auditing, which then would be reported in the Audit Log in the Event Viewer.

http://technet.microsoft.com/en-us/library/cc787413.aspx
0
 

Author Comment

by:karinerivet
ID: 24388414
Thank you; that was exactly what I was seeking.  I applied the appropriate settings and it works exactly as desired.
0
 
LVL 4

Expert Comment

by:jschweg
ID: 24397032
No problem, just remember to try an audit only what you really need, depending on how many files/folders you are auditting you may see a performance drop with all of the added overhead.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question