Solved

Find out who changed a fie name

Posted on 2010-11-08
2
1,096 Views
Last Modified: 2012-05-10
Anyone know how to find out who changed a file name or a folder name?

Server 2008
Windows 7

Someone changed a folder name and a file name and we need to find out who did this. (inappropriate name)
0
Comment
Question by:GPPSD2357
2 Comments
 
LVL 4

Accepted Solution

by:
dcolvard2008 earned 250 total points
ID: 34088090
Have you turned on auditing?
If you haven't then you might not be able to determine who changed the file or folder.


To turn on auditing In Windows 7 or Windows 2008 member server
http://www.discoveryourpc.net/2010/01/auditing-access-to-files-on-windows-7-html/

To turn on auditing in Windows Server 2008 Domain
Enabling file auditing is a 2-step process.
 
 [1] Configure "audit object access" in AD Group Policy or on the server's
 local GPO. This setting is located under Computer Configuration-->Windows
 Settings-->Security Settings-->Local Policies-->Audit Policies. Enable success/failure
 auditing for "Audit object access."
 
 [2] Configure an audit entry on the specific folder(s) that you wish to audit.
 Right-click on the folder-->Properties-->Advanced. From the Auditing tab,
 click Add, then enter the users/groups whom you wish to audit and what actions
 you wish to audit - auditing Full Control will create an audit entry every
 time anyone opens/changes/closes/deletes a file, or you can just audit for
 Delete operations.
 
 After you have this setup you simply check the security logs for file or folder changes.
 


 
0
 
LVL 2

Expert Comment

by:rowlow
ID: 34088420
If you have not setup auditing you can narrow down who the culprit was by checking the NTFS and Share permissions on that specific folder and file.
You can narrow down suspects even more  checking at what time and day this folder/file has changed, but you should prepare yourself that there is a chance you will not get conclusive evidence.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Problem to search 5 42
DHCP scope restore question Server 2003 to 2012R2 6 59
what about DCpro 2 27
Domain Controller FSMO 7 38
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question