Solved

audit trail

Posted on 2013-05-16
4
444 Views
Last Modified: 2013-05-17
I don't have auditing turned on with a particular file server. some one moved a folder inside another one. how can I find out who did this? it is windows server 2003
0
Comment
Question by:geriatricgeek
4 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 167 total points
ID: 39172694
You won't be able to without auditing turned on before the action happened.  I know that is not the answer you were hoping for.   If you are worried for the future you should enable auditing on the files/folders/server.

Thanks

Mike
0
 
LVL 17

Assisted Solution

by:pjam
pjam earned 166 total points
ID: 39172714
totally agree with mkline71.
However in my experience auditing a server is not an easy task.  I turned it on for that same reason, but turned it very soon.  Do some reading, you may decide against doing it.
the mouse is our worst enemy, too easy to move a folder if you are not cautious.
The good news is that it can be moved back if someone notices it is gone.
0
 
LVL 5

Assisted Solution

by:Pankaj_401
Pankaj_401 earned 167 total points
ID: 39174313
If you find to turn on auditing is a difficult task  for your file server do go for file server auditing solution, with a very little search you may find many solutions for the same
0
 
LVL 1

Author Closing Comment

by:geriatricgeek
ID: 39174544
i thought it would be too late for auditing, but i figured i'd throw the question out there anyway. thanks.
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This article runs through the process of deploying a single EXE application selectively to a group of user.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question