Question About "Previous Versions" in Server 2008 R2:

Hi. Is there an event in the Windows Event Viewer that can tell me if/when someone has restored a file to a previous version using Windows Shadow Copy?
I'm in a domain environment and have concerns about people restoring old versions without realizing the ramifications.
Thanks.
LVL 1
homerslmpsonAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Scott CSenior EngineerCommented:
I don't think so.  Everything I can find will log events if there is a problem restoring a file.  

Now that being said...here is what you can do.  

Perform a restore, note the time, then look in the logs to see if anything is generated during that time.

If it's successful, you would see an informational entry.
homerslmpsonAuthor Commented:
I did just that. No luck.
I was hoping I was missing something. I can't help but feel there must be SOME WAY to enable auditing of this.  It's a pretty serious issue if someone mistakenly (or knowingly) restores a previous file (or folder) wouldn't you say?  And the ability to not even know who did it?! That's crazy...
Scott CSenior EngineerCommented:
You could always enable auditing on the folder(s).  This is going to be resource intensive but it would give you what you want.

http://www.techotopia.com/index.php/Auditing_Windows_Server_2008_File_and_Folder_Access

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

FREE DOWNLOAD
ste5anSenior DeveloperCommented:
ScottCha is right. Cause there is no difference in making a mistake by restoring a file or just overwriting it directly.
homerslmpsonAuthor Commented:
Guess I'll have to do that...
Thanks!
Scott CSenior EngineerCommented:
Glad to help!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.