Link to home
Start Free TrialLog in
Avatar of SamuelLam1997
SamuelLam1997Flag for Hong Kong

asked on

How can I audit a file being deleted by a domain user?

Is there any methods that I can audit files in the Win03 Srv environment that can have
history to let me know which users delete which files on the server,
as I discover that some files that shared by a user group, and sometimes there will have
some file missing suddenly, how can I check out exactly who deleted the files?
is the Win03 server include the audit fucntion? if yes how to enable it?
if not is there any 3 party freeware can do te same function? thanks.
Avatar of Krzysztof Pytko
Krzysztof Pytko
Flag of Poland image

Yes, it's possible. You need to enable Objects Auditing ona File Server. How to do that is really good described in MS article at
http://support.microsoft.com/kb/814595

Remember, do not enable to much audits because logs (event logs) would be difficult to analyze.

Regards,
Krzysztof
ASKER CERTIFIED SOLUTION
Avatar of vinsvin
vinsvin
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Does this solution work for you or you need further assistance?

Krzysztof