Solved

File sharing event log in windows 2011 sbs

Posted on 2014-03-18
3
912 Views
Last Modified: 2014-04-02
Does Windows 2008 (or Windows sbs 2011) records a log of each file opened and accessed by the network users? We have a shared folder on the server and each user access it using their credentials, one employee was fired and we want to know which files he was using last, or did he deleted some other files….
Or, is there a way to see which files where modified between yesterday’s backup and today´s backup? We use windows backup.
0
Comment
Question by:marpanet
3 Comments
 
LVL 4

Accepted Solution

by:
michaelalphi earned 500 total points
ID: 39938912
No way before enabled windows auditing.
To enable windows auditing for object access, first activate audits of successful object access attempts and Failure access attempts via the local or domain security policy settings. Else, you will have no record when a file or folder was accessed.
Moreover, this application should work fine for what you were looking here. And further, you will be able to monitor all the critical changes and activities made by users.
0
 
LVL 22

Expert Comment

by:David Atkin
ID: 39939115
Check to see if you have shadow copies enabled.  If yuo do then right click on the share folder, click properties and then go to previous versions and pick a date.

Check that list of files and folders against the existing one.  Its crude but will allow you to recover obvious file deletions. Another option is to check your backups.

With regards to logging the access. As per michaelalphi's comment.  Windows Auditing will need to be enabled.
0
 
LVL 2

Author Closing Comment

by:marpanet
ID: 39973802
Windows auditing was not turned on, I managed to turn it on and now monitor critical changes....

Also we are trying to buy the application, just not enough Budget for that.

Thank you both for the information:

About the backup, didn´t work even dough shadow copies are turned on.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
In this article we will learn how to backup a VMware farm using Nakivo Backup & Replication. In this tutorial we will install the software on a Windows 2012 R2 Server.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question