?
Solved

Investigation - Auditing in Windows 2003

Posted on 2011-04-27
2
Medium Priority
?
307 Views
Last Modified: 2012-05-11
Hi Everyone,

We have an incident where someone accessed a share drive last week and deleted a whole bunch of important files.   The files were on a Windows 2003 server, standalone, no domain.

Unfortunately, auditing was NOT turned on.   I've since turned it on, for future monitoring, but is there any way to track this incident as things stand?

Thanks in advance,

Theo

0
Comment
Question by:Theodosios
2 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 2000 total points
ID: 35479425
No sorry - if auditiing was not switched on  then the info was not recorded
0
 

Author Comment

by:Theodosios
ID: 35479911
Thanks, that's what I figured.

Theo
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question