Solved

data was deleted by a user, find who.

Posted on 2013-06-27
3
247 Views
Last Modified: 2013-07-05
Hi all,
Is any way I can find out who deleted a folder ( data) on the server 2008.
We already gave access to every one, through a security group (read modify) and some one deleted  data .

Please let me know if there is a command line to run in active directory, on in AD.



Thanks
Rabih
0
Comment
Question by:Rabihhaj
  • 2
3 Comments
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 39286321
the security logs will tell you.. you did enable auditing didn't you?
0
 

Author Comment

by:Rabihhaj
ID: 39287353
Hi Vi3ofa,

where is the logs is stored?. and how do i check if it is enable auditing.

Please provide me with the instruction if possible.

Thanks
Rabihhaj
0
 
LVL 78

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 39287362
windows maintains many event logs, the most familiar are
application
security   <<<------
system

if on right clicks on a folder, security settings, advanced, this will show the audit settings
What you are interested in is event 560 in the security event logs.
sample picture
good information: http://sogeeky.blogspot.ca/2006/07/how-to-audit-and-track-file-deletions.html
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Data-Updating-VBA-V3 15 43
URL to download Windows 10 Enterprise 64-bit .ISO 4 233
Excel Formula return each instance from list 2 62
Where is user Lync data stored 4 58
This collection of functions covers all the normal rounding methods of just about any numeric value.
Technology opened people to different means of presenting information, but PowerPoint remains to be above competition. Know why PPT still works today.
The viewer will learn how to simulate a series of coin tosses with the rand() function and learn how to make these “tosses” depend on a predetermined probability. Flipping Coins in Excel: Enter =RAND() into cell A2: Recalculate the random variable…
The view will learn how to download and install SIMTOOLS and FORMLIST into Excel, how to use SIMTOOLS to generate a Monte Carlo simulation of 30 sales calls, and how to calculate the conditional probability based on the results of the Monte Carlo …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now