Avatar of homerslmpson
homerslmpsonFlag for United States of America

asked on 

Question About "Previous Versions" in Server 2008 R2:

Hi. Is there an event in the Windows Event Viewer that can tell me if/when someone has restored a file to a previous version using Windows Shadow Copy?
I'm in a domain environment and have concerns about people restoring old versions without realizing the ramifications.
Thanks.
Windows Server 2008Microsoft Legacy OS

Avatar of undefined
Last Comment
Scott C
Avatar of Scott C
Scott C
Flag of United States of America image

I don't think so.  Everything I can find will log events if there is a problem restoring a file.  

Now that being said...here is what you can do.  

Perform a restore, note the time, then look in the logs to see if anything is generated during that time.

If it's successful, you would see an informational entry.
Avatar of homerslmpson
homerslmpson
Flag of United States of America image

ASKER

I did just that. No luck.
I was hoping I was missing something. I can't help but feel there must be SOME WAY to enable auditing of this.  It's a pretty serious issue if someone mistakenly (or knowingly) restores a previous file (or folder) wouldn't you say?  And the ability to not even know who did it?! That's crazy...
ASKER CERTIFIED SOLUTION
Avatar of Scott C
Scott C
Flag of United States of America image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of ste5an
ste5an
Flag of Germany image

ScottCha is right. Cause there is no difference in making a mistake by restoring a file or just overwriting it directly.
Avatar of homerslmpson
homerslmpson
Flag of United States of America image

ASKER

Guess I'll have to do that...
Thanks!
Avatar of Scott C
Scott C
Flag of United States of America image

Glad to help!
Windows Server 2008
Windows Server 2008

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo