Avatar of Harold
Harold
Flag for United States of America asked on

Deleted folder from Windows 2012 shared folders

We lost a parent folder that contained a LOT of data, we can restore, but how can I tell what user did this and prevent this from happening again?

Our backup runs at 8:00PM and the folder was still there, as I see it in the backup, I definitely need to know now, as this was way after hours.

Windows 2012 R2 Server.
Windows Server 2012Active DirectoryOS Security

Avatar of undefined
Last Comment
arnold

8/22/2022 - Mon
SOLUTION
pjam

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
ASKER CERTIFIED SOLUTION
Will Szymkowski

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Harold

ASKER
PJAM: thanks, ya currently I'm trying to figure out which Audit is to be enabled. There are some enabled, just not sure which one tracks this.
SOLUTION
arnold

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes