Any way to find out who is deleting files/folders off of a shared network drive?

Auditing is currently NOT turned on.  This is a Windows 2003 file server with THOUSANDS of sub directories...I thought if I turned on auditing for the entire volume, it would be too much overhead, but in the past couple months we've had two two directories "disappear" and no way to track what happened to them.  I was able to restore from backup, but now I want to find out what's going on.  Suggestions?
tenoverAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Kennyboy5IT Support AnalystCommented:
You would have to setup auditing on the server. On the file server go to the folder in question, right click, properties, Security tab, Advanced, Audit

Here's a detailed article.

http://support.microsoft.com/kb/325898
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Kennyboy5IT Support AnalystCommented:
You could turn on just 'delete' for the audit which would cut down on a lot of entries in the event viewer.
0
MPontoNetwrok AdminCommented:
Turn on auditing only for successful deletion of the folder object.
when you init auditing for the root of the share add everyone, remove inherit from parent and select only the delete option.
if a folder turns up missing with empty logs you will know it simply got moved.

0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.