<div>
Is this just a single Shared Directory or the entire server was rolled back to Sept 29?<br />
Do you have restore previous version enabled (VSS) and if so do users have the right to apply?
</div>


Is this just a single Shared Directory or the entire server was rolled back to Sept 29?
Do you have restore previous version enabled (VSS) and if so do users have the right to apply?

<div>
All shared folders were rolled back to that date, no other files on the drives.<br />
Previous versions enabled at default times.<br />
Just wanting an audit path really, I know someone did it, just can't prove it.<br />
And yes, users could restore.
</div>


All shared folders were rolled back to that date, no other files on the drives.
Previous versions enabled at default times.
Just wanting an audit path really, I know someone did it, just can't prove it.
And yes, users could restore.

<div>
<div class="content wysiwyg-content">
Hi Experts, <br />
<br />
We have a server 2012 HyperV VM running exchange 2010 SP3 and all running well.<br />
Last night we got a call to say that the clients &quot;Common&quot; share was showing date modified of 29 September 2014, instead of 6 October 2014, upon further investigation we found that ALL shares on the server were reverted back to 29 September.<br />
The onsite IT contact is sure that no one there would know how to use previous versions.<br />
Even a share that only a few people (not our admin account) have access to, so it must be one of those users.<br />
Can anyone tell me of a log somewhere which records such events?<br />
I have been through the app and sys and sec logs but they show nothing to do with VSS at all.<br />
Any help would be appreciated.<br />
<br />
Cheers<br />
<br />
Craig
</div>
</div>


Hi Experts, 

We have a server 2012 HyperV VM running exchange 2010 SP3 and all running well.
Last night we got a call to say that the clients "Common" share was showing date modified of 29 September 2014, instead of 6 October 2014, upon further investigation we found that ALL shares on the server were reverted back to 29 September.
The onsite IT contact is sure that no one there would know how to use previous versions.
Even a share that only a few people (not our admin account) have access to, so it must be one of those users.
Can anyone tell me of a log somewhere which records such events?
I have been through the app and sys and sec logs but they show nothing to do with VSS at all.
Any help would be appreciated.

Cheers

Craig

Server 2012 Previous Versions accidental revert

Windows Server 2012 is the server version of Windows 8 and the successor to Windows Server 2008 R2. Windows Server 2012 is the first version of Windows Server to have no support for Itanium-based computers since Windows NT 4.0. Windows Server 2012, now in its second release (Windows Server 2012 Release 2) includes Foundation, Essentials, Standard and Datacenter, and does not support IA-32 or IA-64 processors.