Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

data was deleted by a user, find who.

Posted on 2013-06-27
3
Medium Priority
?
292 Views
Last Modified: 2013-07-05
Hi all,
Is any way I can find out who deleted a folder ( data) on the server 2008.
We already gave access to every one, through a security group (read modify) and some one deleted  data .

Please let me know if there is a command line to run in active directory, on in AD.



Thanks
Rabih
0
Comment
Question by:Rabihhaj
  • 2
3 Comments
 
LVL 84

Expert Comment

by:David Johnson, CD, MVP
ID: 39286321
the security logs will tell you.. you did enable auditing didn't you?
0
 

Author Comment

by:Rabihhaj
ID: 39287353
Hi Vi3ofa,

where is the logs is stored?. and how do i check if it is enable auditing.

Please provide me with the instruction if possible.

Thanks
Rabihhaj
0
 
LVL 84

Accepted Solution

by:
David Johnson, CD, MVP earned 1500 total points
ID: 39287362
windows maintains many event logs, the most familiar are
application
security   <<<------
system

if on right clicks on a folder, security settings, advanced, this will show the audit settings
What you are interested in is event 560 in the security event logs.
sample picture
good information: http://sogeeky.blogspot.ca/2006/07/how-to-audit-and-track-file-deletions.html
0

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Deploying a Microsoft Access application in a Citrix environment is not difficult but takes a few steps. However, Citrix system people are often of little help, as they typically know next to nothing about Access. The script provided here will take …
Technology opened people to different means of presenting information, but PowerPoint remains to be above competition. Know why PPT still works today.
The view will learn how to download and install SIMTOOLS and FORMLIST into Excel, how to use SIMTOOLS to generate a Monte Carlo simulation of 30 sales calls, and how to calculate the conditional probability based on the results of the Monte Carlo …
The viewer will learn how to use a discrete random variable to simulate the return on an investment over a period of years, create a Monte Carlo simulation using the discrete random variable, and create a graph to represent the possible returns over…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question