Question About "Previous Versions" in Server 2008 R2:

homerslmpson
homerslmpson used Ask the Experts™
on
Hi. Is there an event in the Windows Event Viewer that can tell me if/when someone has restored a file to a previous version using Windows Shadow Copy?
I'm in a domain environment and have concerns about people restoring old versions without realizing the ramifications.
Thanks.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Scott CSenior Engineer

Commented:
I don't think so.  Everything I can find will log events if there is a problem restoring a file.  

Now that being said...here is what you can do.  

Perform a restore, note the time, then look in the logs to see if anything is generated during that time.

If it's successful, you would see an informational entry.

Author

Commented:
I did just that. No luck.
I was hoping I was missing something. I can't help but feel there must be SOME WAY to enable auditing of this.  It's a pretty serious issue if someone mistakenly (or knowingly) restores a previous file (or folder) wouldn't you say?  And the ability to not even know who did it?! That's crazy...
Senior Engineer
Commented:
You could always enable auditing on the folder(s).  This is going to be resource intensive but it would give you what you want.

http://www.techotopia.com/index.php/Auditing_Windows_Server_2008_File_and_Folder_Access
Build an E-Commerce Site with Angular 5

Learn how to build an E-Commerce site with Angular 5, a JavaScript framework used by developers to build web, desktop, and mobile applications.

ste5anSenior Developer

Commented:
ScottCha is right. Cause there is no difference in making a mistake by restoring a file or just overwriting it directly.

Author

Commented:
Guess I'll have to do that...
Thanks!
Scott CSenior Engineer

Commented:
Glad to help!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial