?
Solved

log files on small business server 2011

Posted on 2013-11-27
2
Medium Priority
?
235 Views
Last Modified: 2014-01-22
My Boss wants me to find out something.  There are two admin accounts on an SBS 2011 server we have.  One of the admin's  "wasn't me" !!  un selected a few check boxes when doing a properties of a public folder in exchange, and it caused some email to get deleted faster than it should have.  He believes there should be an "audit trail" in the OS somewhere that would say who, and when said person might have made a change.  I can't find it anywhere, but that is not to see it's not there.   Would anyone out there have any idea where I might look for that kind of thing in the logs?
0
Comment
Question by:micromark1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 

Assisted Solution

by:EdservG
EdservG earned 1000 total points
ID: 39681723
Hi, Micromark1.

The log exist, but is not enable by default. You need to enable audit policys to obtain this.

Who and when make this in past are not possible to get.. However you can power on this audit configuration and take possible to view it on future.

Thanks,
Edserv
0
 
LVL 3

Accepted Solution

by:
Detlef001 earned 1000 total points
ID: 39683406
If the changes are made then it is very difficult to guess who did what. You can check on the windows log but yes that too on a note that the auditing must be enabled.

You can check that at the security log events. That can enrich you the exact details. And for future instances you can have a look at an third party file server monitoring application.

Have a look.

Thanks.
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When asking a question in a forum or creating documentation, screenshots are vital tools that can convey a lot more information and save you and your reader a lot of time
A couple of months ago we ran into an issue that necessitated re-creating our Edge Subscriptions. However, when we attempted to execute the command: New-EdgeSubscription -filename C:\NewEdgeSub_01.xml we received an error indicating that the LDAP se…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question