I have a high level employee that "may" have deleted or transferred some files from our file server and want to know if there is an application or tool that I can use to determine who the last person was to access them. We are a Windows 2003 Active Directory shop. Unfortunately, I do not have shadow volumes enabled nor did I install a key logger on this individuals workstation. Any help that you can provide would be most helpful. Thank you.