Solved

How to see log of network file deletions and receive alerts about it

Posted on 2011-03-14
8
510 Views
Last Modified: 2012-05-11
Hello all, I have two separate networks infrastructures but am in need of the same application. I want to make sure that I receive alerts or at least have an easy way of finding out if users are deleting files on the file servers? What is the best app for this?

Please do not suggest Event Viewer or anything that requires manual labor of combing through logs. I am looking for an easy, intuitive, possibly automatic way of getting reports of which files are being deleted?

The networks have a Win2003, Win2008 domain controller with Active Directory, Group Policies, and Spiceworks running. All workstations are WinXP based.

Thank you in advance!
0
Comment
Question by:XAnalyzer
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 7

Expert Comment

by:eugene20022002
ID: 35128698
Download and try the trial software Here
Its called AD Audit plus.
Awesome product. I use it daily for reports, and it actively e-mails you when someone creates or deletes an AD user, when anything in AD changes that you specify for it to be monitor and alert.
Its a web interface and takes about 3minutes to install.
Has a File server module that will do EXACTLY what you are looking for.
Give it a try and let me know.

Regards
0
 

Author Comment

by:XAnalyzer
ID: 35129237
Hi eugene thanks for your prompt reply. Software looks promising and I am downloading it now to try it out and will let you know. By any chance do you know how much it costs for a 1 server license? I notice they don't state the price on the site.
0
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

 
LVL 7

Expert Comment

by:eugene20022002
ID: 35135380
you will find the pricing there http://www.manageengine.com/products/active-directory-audit/pricing-details.html

here is the link to there online store http://www.manageengine.com/products/active-directory-audit/store.html

Also have a look at the following products. One of them seems to have a limited free version which could do the trick
 NetWrix File Server Change Reporter
 VARONIS® DATADVANTAGE® FOR WINDOWS

0
 

Author Comment

by:XAnalyzer
ID: 35148918
Very expensive although intuitive in design. GFI LANguard Security Event Log Monitor seems like a better, more affordable fit?
0
 
LVL 7

Expert Comment

by:eugene20022002
ID: 35149691
I havent used the events manager myself but I do use gfi software and must say their support, online chat and remote support is pretty good. Pricing it is better. Install both, compare the difference in features and ease of use.

Have you tried the free version of NetWrix?
0
 

Author Comment

by:XAnalyzer
ID: 35149736
The free version seems extremely limited and only reports for two days: today and yesterday which is a sticking point. I'll try the free trial at some point. I just want to confirm that with all of the software you suggested, you get an email alert of when and who changed/modified files?
0
 
LVL 7

Accepted Solution

by:
eugene20022002 earned 500 total points
ID: 35150076
With AD Audit Im 100% sure you get e-mail alerts

GFI - Alerts but not sure if via e-mail , possibly it does though

NetWrix - as you said, the free version is very limited and would probable not suite your needs

Varonis - Not sure but does seem overkill for your needs

PA File Sight - Looks like a great tool and seems to meet your needs. (Yet another to evaluate :-)
http://www.poweradmin.com/file-sight/


Before I found Ad Audit , another piece of software I evaluated was from Quest http://www.quest.com/changeauditor-for-windows-file-servers/
It seemed good, bt was a bit pricy and not as easy to setup and use.

I think the only way you going to find what you looking for is by trying them out and seeing which one you like best.

Good Luck
0

Featured Post

Is Your DevOps Pipeline Leaking?

Is your CI/CD pipeline a hodge-podge of randomly connected tools? You’ve likely got a tool to fix one problem & then a different tool to fix another, resulting in a cluster of tools with overlapping functionality. Learn how to optimize your pipeline with Gartner's recommendations

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
In this blog we highlight approaches to managed security as a service.  We also look into ConnectWise’s value in aiding MSPs’ security management and indicate why critical alerting is a necessary integration.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question