Solved

Server 2012 Previous Versions accidental revert

Posted on 2014-10-06
3
26 Views
Last Modified: 2015-05-17
Hi Experts,

We have a server 2012 HyperV VM running exchange 2010 SP3 and all running well.
Last night we got a call to say that the clients "Common" share was showing date modified of 29 September 2014, instead of 6 October 2014, upon further investigation we found that ALL shares on the server were reverted back to 29 September.
The onsite IT contact is sure that no one there would know how to use previous versions.
Even a share that only a few people (not our admin account) have access to, so it must be one of those users.
Can anyone tell me of a log somewhere which records such events?
I have been through the app and sys and sec logs but they show nothing to do with VSS at all.
Any help would be appreciated.

Cheers

Craig
0
Comment
Question by:Tingathewinga
  • 2
3 Comments
 
LVL 22

Expert Comment

by:yo_bee
ID: 40366484
Is this just a single Shared Directory or the entire server was rolled back to Sept 29?
Do you have restore previous version enabled (VSS) and if so do users have the right to apply?
0
 
LVL 3

Author Comment

by:Tingathewinga
ID: 40368089
All shared folders were rolled back to that date, no other files on the drives.
Previous versions enabled at default times.
Just wanting an audit path really, I know someone did it, just can't prove it.
And yes, users could restore.
0
 
LVL 22

Accepted Solution

by:
yo_bee earned 500 total points
ID: 40368158
Do you have Auditing enable on the share?
If not you are pretty much out of luck.

You can create a GPP to apply a registry setting change to remove the previous version tab from the users context and properties window of the share to try an prevent this from happening again.
http://www.experts-exchange.com/Software/Backup_Restore/Q_26268937.html

http://social.technet.microsoft.com/Forums/windowsserver/en-US/b78896ee-8364-4a02-a082-7f22e6417dc7/server-2008-and-shadow-copy-permissions?forum=winservergen
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Table of Contents: Lesson 1 - Installing Windows Server 2012 (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2012/A_11592-Become-an-Administrator-Installing-Windows-Server-2012.html) Lesson 2 - Configuring Ser…
What to do when Windows Update is not working correctly? What tools can I use to detect the cause of the malfunction problem? What does this numeric error code mean? These and other questions that you have been asking in the past are answered here (…
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now