[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

How can I determine what’s or who's marking  folders on my file server as Protected Operating System Files?

Posted on 2013-01-18
5
Medium Priority
?
344 Views
Last Modified: 2013-01-28
I have a 2008 server that I’m using as a file server.  Every couple of days I have two folders that disappear.  The only way to see them is to uncheck “hide protected operating system files”.   The option to unhide is grayed out so I have to unhide with the attrib -r -a -s -h *.* command, but then next time I look up, there hidden again.  I have made sure only domain admins have the right to change attributes.  Is there a way to track down the cause of this issue?
0
Comment
Question by:SpammyChicken
  • 2
  • 2
5 Comments
 
LVL 57

Expert Comment

by:giltjr
ID: 38794300
Enable auditing?
0
 

Author Comment

by:SpammyChicken
ID: 38794779
Do I enable it on the Domain Controller for on the File server?
0
 
LVL 57

Expert Comment

by:giltjr
ID: 38795518
The file server.
0
 
LVL 4

Accepted Solution

by:
JustMy2Cents earned 2000 total points
ID: 38796221
Problem is, native Windows file auditing generates multiple entries for a single access event and typically lists thousands of entries per day.

You might want to use a 3rd-party solution like FileAudit that allows you to track, audit, report and alert on all access to files and folders on Windows servers:
http://www.isdecisions.com/products/fileaudit

I noticed there is a new version of the software coming soon (but still in beta for now):
http://community.isdecisions.com/knowledgebase/articles/142333-fileaudit-4-beta-testing-program-how-to
0
 

Author Closing Comment

by:SpammyChicken
ID: 38827259
I was able to fix the issue by taking full access away from the domain admin group and giving it only to my user.  I have a couple consultants that have domain admin rights at the moment so that could be were the problem was.  I will check out the software you suggested, thanks for your help.
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Make the most of your online learning experience.
Tech spooks aren't just for those who are tech savvy, it also happens to those of us running a business. Check out the top tech spooks for business owners.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question