Solved

data was deleted by a user, find who.

Posted on 2013-06-27
3
285 Views
Last Modified: 2013-07-05
Hi all,
Is any way I can find out who deleted a folder ( data) on the server 2008.
We already gave access to every one, through a security group (read modify) and some one deleted  data .

Please let me know if there is a command line to run in active directory, on in AD.



Thanks
Rabih
0
Comment
Question by:Rabihhaj
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 82

Expert Comment

by:David Johnson, CD, MVP
ID: 39286321
the security logs will tell you.. you did enable auditing didn't you?
0
 

Author Comment

by:Rabihhaj
ID: 39287353
Hi Vi3ofa,

where is the logs is stored?. and how do i check if it is enable auditing.

Please provide me with the instruction if possible.

Thanks
Rabihhaj
0
 
LVL 82

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 39287362
windows maintains many event logs, the most familiar are
application
security   <<<------
system

if on right clicks on a folder, security settings, advanced, this will show the audit settings
What you are interested in is event 560 in the security event logs.
sample picture
good information: http://sogeeky.blogspot.ca/2006/07/how-to-audit-and-track-file-deletions.html
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The canonical version of this article is on my web site here: http://iconoun.com/articles/collisions/ A companion presentation is available here: http://iconoun.com/articles/collisions/Unicode_Presentation.pdf
Article by: Leon
Software Metering within our group of companies has always been an afterthought until auditing of software and licensing became a pain point. Orchestrator and SCCM metering gave us the answer and it was an exciting process.
Viewers will learn how to maximize accessibility options in an Excel workbook for users with accessibility issues.
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
Suggested Courses

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question