Solved

log files on small business server 2011

Posted on 2013-11-27
2
231 Views
Last Modified: 2014-01-22
My Boss wants me to find out something.  There are two admin accounts on an SBS 2011 server we have.  One of the admin's  "wasn't me" !!  un selected a few check boxes when doing a properties of a public folder in exchange, and it caused some email to get deleted faster than it should have.  He believes there should be an "audit trail" in the OS somewhere that would say who, and when said person might have made a change.  I can't find it anywhere, but that is not to see it's not there.   Would anyone out there have any idea where I might look for that kind of thing in the logs?
0
Comment
Question by:micromark1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 

Assisted Solution

by:EdservG
EdservG earned 250 total points
ID: 39681723
Hi, Micromark1.

The log exist, but is not enable by default. You need to enable audit policys to obtain this.

Who and when make this in past are not possible to get.. However you can power on this audit configuration and take possible to view it on future.

Thanks,
Edserv
0
 
LVL 3

Accepted Solution

by:
Detlef001 earned 250 total points
ID: 39683406
If the changes are made then it is very difficult to guess who did what. You can check on the windows log but yes that too on a note that the auditing must be enabled.

You can check that at the security log events. That can enrich you the exact details. And for future instances you can have a look at an third party file server monitoring application.

Have a look.

Thanks.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
Windows 10 Creator Update has just been released and I have it working very well on my laptop. Read below for issues, fixes and ideas.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question