File Auditing & Reporting -- Windows Server 2012

Posted on 2014-08-20
Last Modified: 2014-08-26
What is a good "Windows Server 2012
File Auditing & Reporting" way to determine
where a file was moved to and last modified at,
if NOT found, what day it was deleted ?
 Example Timeline
   ** 1/21/14 = user saves to
   ** 2/12/14 = another user moves to
   ** 3/22/14 = another user deletes from
   ** 4/15/14 = another user tells me to restore
                \\filesrvr\filename.doc to
                most current version

 I somehow need to know that 3/21/14 is the most current
 \\filesrvr\filename.doc file, even when it is really at
Software Requirements
  ** two Windows Server 2012 file servers
  ** software under $500 if possible

  1. open "File Auditing & Reporting" software
  2. click SEARCH
  3. enter "\\filesrvr\filename.doc" & "last 90 days"
  4. click RUN
  5. report shows everything
     that happened to this file
        ** deletes
        ** moves
        ** cut/paste
        ** etc
  ** Microsoft System Center 2012, Audit Collection Services (ACS)
Question by:finance_teacher
    1 Comment
    LVL 60

    Accepted Solution


    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
    Read about achieving the basic levels of HRIS security in the workplace.
    In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
    In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…

    730 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now