Re: CAN DELETION OF FILE BE TRACED?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

You won't be able to find much of anything after the fact, you need to enable auditing of file and folders if you want to keep track of these kind of events.

John

Faraz A. Qureshi wrote:
I am working in an office with local server in addition to our personal drives for different files being shared. I have recently found some of my files being deleted. Is it possible to detect who might have done so, amongst the users/IPs?

.

Relevant Pages

  • Re: Permissions problem using IIS 4.0 and Windows NT 4 Server (Intranet)
    ... For any permissions problem, enable auditing, specifically file access ... failure auditing for Everyone and Guests for all files and folders on the ... > administrator of the server and domain. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Tracking file deletions on Win2K3 Servers
    ... Enable auditing on your folder's, ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Just lately files in various folders have been going missing, ... is there any easier way of reporting ...
    (microsoft.public.win2000.security)
  • Re: Audit Policies - help.
    ... > I am trying to set up an audit policy on my domain ... > controller to track the access to files and folders. ... > have selected to log the sucess and failure events. ... properties, Advanced to enable auditing. ...
    (microsoft.public.win2000.security)
  • Re: file management
    ... If you enable auditing of object access on your computers ... and then enable auditing of the folders for only the two delete permissions you ... should be able to find out the user by looking in the security log for Event ID pairs ... instead of full or modify - at least to the folders only which can be done in special ...
    (microsoft.public.security)