Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

How can I determine what’s or who's marking  folders on my file server as Protected Operating System Files?

Posted on 2013-01-18
5
336 Views
Last Modified: 2013-01-28
I have a 2008 server that I’m using as a file server.  Every couple of days I have two folders that disappear.  The only way to see them is to uncheck “hide protected operating system files”.   The option to unhide is grayed out so I have to unhide with the attrib -r -a -s -h *.* command, but then next time I look up, there hidden again.  I have made sure only domain admins have the right to change attributes.  Is there a way to track down the cause of this issue?
0
Comment
Question by:SpammyChicken
  • 2
  • 2
5 Comments
 
LVL 57

Expert Comment

by:giltjr
ID: 38794300
Enable auditing?
0
 

Author Comment

by:SpammyChicken
ID: 38794779
Do I enable it on the Domain Controller for on the File server?
0
 
LVL 57

Expert Comment

by:giltjr
ID: 38795518
The file server.
0
 
LVL 4

Accepted Solution

by:
JustMy2Cents earned 500 total points
ID: 38796221
Problem is, native Windows file auditing generates multiple entries for a single access event and typically lists thousands of entries per day.

You might want to use a 3rd-party solution like FileAudit that allows you to track, audit, report and alert on all access to files and folders on Windows servers:
http://www.isdecisions.com/products/fileaudit

I noticed there is a new version of the software coming soon (but still in beta for now):
http://community.isdecisions.com/knowledgebase/articles/142333-fileaudit-4-beta-testing-program-how-to
0
 

Author Closing Comment

by:SpammyChicken
ID: 38827259
I was able to fix the issue by taking full access away from the domain admin group and giving it only to my user.  I have a couple consultants that have domain admin rights at the moment so that could be were the problem was.  I will check out the software you suggested, thanks for your help.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question