A way to keep track who is deleting data on a files server for Windows server 2003?

I am look for a good way to implement that we can tell who is deleting data from a file server shared folders..
TonyEFAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

DatedmanCommented:
You can implement auditing at the folder level, right-click and go to properties, advanced, auditing tab--or using GPO: http://technet.microsoft.com/en-us/library/cc787413(WS.10).aspx?ppud=4
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DatedmanCommented:
btw i have found this *really* handy, customer claimed the server was spontaneously deleting folders so i turned on auditing and proved otherwise--however be careful how much you audit as it can affect server cpu.
0
TonyEFAuthor Commented:
would auditing be loged in the event log under the security?
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

DatedmanCommented:
Yup
0
TonyEFAuthor Commented:
I was told that this funtionility has been turned on for some folders, is there a way for me to find which folders have it? without having to go thru all the folders?
0
DatedmanCommented:
I am not aware of (and cannot find with a quick search) a tool to check this.  Have you looked in the group policy yet?  BTW here's another article for you: http://www.windowsecurity.com/articles/Windows-Active-Directory-Auditing.html
0
TonyEFAuthor Commented:
It was not set with a group policy.. So you are saying that I would have to go thru all the folders..

thank you for your assistance..
0
DatedmanCommented:
there may be a command-line tool to enumerate this (among other things) but haven't found it yet.
0
TonyEFAuthor Commented:
Which policy should I use to track the delete of changed files?
0
DatedmanCommented:
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.