Hi we suspect one of our users has accidentally moved a directory on a share inside of another directory on a share. However, what NTFS read permission would they need to be able to move it from A to B, on the B folder? Or is there a way to see who copied this directory over, i.e. who moved it?
Also - the MAC (modified, accessed, created) times on this folder seem confusing. If a folder was created in say \\server\share\orig in march this year - and it was copied to \\server\share\new would it have a created time of today in new, or would it maintain the created time of orig. So if that directory was created in march in orig, and its copied inside of new, would it keep the march created time, or the time it was moved, i.e. yesterday?
Would love to solve whod done this. Its a 2003 server.