window server 2012 and 2008

Posted on 2014-07-17
Last Modified: 2014-08-01
Dear all

We need help actually some user login to server and deleted some file and folder  so we need solution
i want to catch a thief so I request u that how to monitor this task by event viewer in server 2008 && 2012
Question by:prana1984
    LVL 17

    Expert Comment

    I have found that when someone says a folder has been deleted, it has really been dragged and dropped by an errant Mouse.  Did you do a search for missing folder?
    Setting up auditing to determine who deleted a file is very obnoxious, but can be accomplished if you want that.
    See this doc for starters:

    Do you have Shadow Copy running on that Share?  It may tell you when it was deleted.
    LVL 9

    Accepted Solution

    You can't--unless you have some kind of auditing enabled.

    Windows has built-in auditing:

    However, it's not the most user-friendly solution.  If you want more reliable auditing, some third party programs will also email you daily reports and updates based on your settings:

    Author Comment

    THX All

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Suggested Solutions

    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now