Solved

log files on small business server 2011

Posted on 2013-11-27
2
220 Views
Last Modified: 2014-01-22
My Boss wants me to find out something.  There are two admin accounts on an SBS 2011 server we have.  One of the admin's  "wasn't me" !!  un selected a few check boxes when doing a properties of a public folder in exchange, and it caused some email to get deleted faster than it should have.  He believes there should be an "audit trail" in the OS somewhere that would say who, and when said person might have made a change.  I can't find it anywhere, but that is not to see it's not there.   Would anyone out there have any idea where I might look for that kind of thing in the logs?
0
Comment
Question by:micromark1
2 Comments
 

Assisted Solution

by:EdservG
EdservG earned 250 total points
ID: 39681723
Hi, Micromark1.

The log exist, but is not enable by default. You need to enable audit policys to obtain this.

Who and when make this in past are not possible to get.. However you can power on this audit configuration and take possible to view it on future.

Thanks,
Edserv
0
 
LVL 3

Accepted Solution

by:
Detlef001 earned 250 total points
ID: 39683406
If the changes are made then it is very difficult to guess who did what. You can check on the windows log but yes that too on a note that the auditing must be enabled.

You can check that at the security log events. That can enrich you the exact details. And for future instances you can have a look at an third party file server monitoring application.

Have a look.

Thanks.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
Read this checklist to learn more about the 15 things you should never include in an email signature.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
how to add IIS SMTP to handle application/Scanner relays into office 365.

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question