Is there anyway to tell which user deleted a file?

Hi Everyone,

There is a network share that a few people have access to and recently some files have been deleted.  There is some question as to who deleted them.  Is there anyway to check this in Active Directory or somewhere else within the DC?

Thanks!
JsmplyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Wonko_the_SaneCommented:
If auditing on the server hosting the file was enabled, plus the auditing was configured for this file, then yes. In this case you will see in the security log of the file server. This is something that is not enabled by default, so if this wasn't done prior to the deletion you will probably not be able to tell who did it.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
iUsernameCommented:
I haven't heard of something that can actually do that, but If you're interested in something that might cost some money, I've heard of a company called covertix that they're product can tell you what is happening to your files and who is doing what.
0
JsmplyAuthor Commented:
Thanks!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.