Windows Server 2003 - File Server - Track deleted files/folder

Hi Experts,

I am looking for a nice easy to use way to track a couple shares on a windows server 2003 file server. I have a couple shares with a few hundred users connecting to it so it would be nice to see who is deleting files/folders on the share.

Who is Participating?
Ehab SalemIT ManagerCommented:
enable auditing on these folders, and choose to track deletes. Then in event viewer you will be able to see who deleted what.
Of course this might not be what you are looking for as you will need to dif into the event viewer. But it will give you indication..
Krzysztof PytkoSenior Active Directory EngineerCommented:
It would be done after enabling File/Folder audit and implementing inspection. Please check this MS article how to do that at

RLComputingAuthor Commented:
Sorry I should have been more specific. Are there any third party software available/recommended? I would like to be able to pull up reports as opposed to digging through events.
Krzysztof PytkoSenior Active Directory EngineerCommented:
OK, I've never used anything similar but I found some event log analyzer. You may check if it fullfils your requirements

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.