Solved

File sharing event log in windows 2011 sbs

Posted on 2014-03-18
3
920 Views
Last Modified: 2014-04-02
Does Windows 2008 (or Windows sbs 2011) records a log of each file opened and accessed by the network users? We have a shared folder on the server and each user access it using their credentials, one employee was fired and we want to know which files he was using last, or did he deleted some other files….
Or, is there a way to see which files where modified between yesterday’s backup and today´s backup? We use windows backup.
0
Comment
Question by:marpanet
3 Comments
 
LVL 4

Accepted Solution

by:
michaelalphi earned 500 total points
ID: 39938912
No way before enabled windows auditing.
To enable windows auditing for object access, first activate audits of successful object access attempts and Failure access attempts via the local or domain security policy settings. Else, you will have no record when a file or folder was accessed.
Moreover, this application should work fine for what you were looking here. And further, you will be able to monitor all the critical changes and activities made by users.
0
 
LVL 22

Expert Comment

by:David Atkin
ID: 39939115
Check to see if you have shadow copies enabled.  If yuo do then right click on the share folder, click properties and then go to previous versions and pick a date.

Check that list of files and folders against the existing one.  Its crude but will allow you to recover obvious file deletions. Another option is to check your backups.

With regards to logging the access. As per michaelalphi's comment.  Windows Auditing will need to be enabled.
0
 
LVL 2

Author Closing Comment

by:marpanet
ID: 39973802
Windows auditing was not turned on, I managed to turn it on and now monitor critical changes....

Also we are trying to buy the application, just not enough Budget for that.

Thank you both for the information:

About the backup, didn´t work even dough shadow copies are turned on.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question