Solved

data was deleted by a user, find who.

Posted on 2013-06-27
3
259 Views
Last Modified: 2013-07-05
Hi all,
Is any way I can find out who deleted a folder ( data) on the server 2008.
We already gave access to every one, through a security group (read modify) and some one deleted  data .

Please let me know if there is a command line to run in active directory, on in AD.



Thanks
Rabih
0
Comment
Question by:Rabihhaj
  • 2
3 Comments
 
LVL 79

Expert Comment

by:David Johnson, CD, MVP
ID: 39286321
the security logs will tell you.. you did enable auditing didn't you?
0
 

Author Comment

by:Rabihhaj
ID: 39287353
Hi Vi3ofa,

where is the logs is stored?. and how do i check if it is enable auditing.

Please provide me with the instruction if possible.

Thanks
Rabihhaj
0
 
LVL 79

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 39287362
windows maintains many event logs, the most familiar are
application
security   <<<------
system

if on right clicks on a folder, security settings, advanced, this will show the audit settings
What you are interested in is event 560 in the security event logs.
sample picture
good information: http://sogeeky.blogspot.ca/2006/07/how-to-audit-and-track-file-deletions.html
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The System Center Operations Manager 2012, known as SCOM, is a part of the Microsoft system center product that provides the user with infrastructure monitoring and application performance monitoring. SCOM monitors:   Windows or UNIX/LinuxNetwo…
Having trouble getting your hands on Dynamics 365 Field Service or Project Service trial? Worry No More!!!
Viewers will learn the different options available in the Backstage view in Excel 2013.
The viewer will learn how to use the =DISCRINV command to create a discrete random variable, use this command to model a set of probabilities and outcomes in a Monte Carlo simulation, and learn how to find the standard deviation of a set of probabil…

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question