users deleting files from a server

  • Thread starter Thread starter lou
  • Start date Start date
L

lou

I have some excel files that one of my users keeps
deleting from a shared folder on the network. Problem is
that I have 200 users and do not know who is doing it. Is
there an event log that I could view to see who is
deleting files from a server? Any help would be excellent.

Server is running Windows 2000 SP4.

lou
 
--------------------
Content-Class: urn:content-classes:message
From: "lou" <[email protected]>
Sender: "lou" <[email protected]>
Subject: users deleting files from a server
Date: Mon, 3 Nov 2003 11:02:23 -0800
Lines: 10
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
Thread-Index: AcOiPQNlA3Y9ve6NRQqdqv1BDjgesw==
Newsgroups: microsoft.public.win2000.security
Path: cpmsftngxa06.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.security:14735
NNTP-Posting-Host: TK2MSFTNGXA12 10.40.1.164
X-Tomcat-NG: microsoft.public.win2000.security

I have some excel files that one of my users keeps
deleting from a shared folder on the network. Problem is
that I have 200 users and do not know who is doing it. Is
there an event log that I could view to see who is
deleting files from a server? Any help would be excellent.

Server is running Windows 2000 SP4.

lou
Click to expand...

Hi Lou!

Unfortunately there is no quick way to tell who is deleting the files. You will need to turn on auditing and then comb through the logs to see who is accessing
and then deleting the files. The following article will show you how to turn on the appropriate auditing for your system.

301640 HOW TO: Set, View, Change, or Remove Auditing for a File or Folder in
http://support.microsoft.com/?id=301640

Siddharth Sawkar
PSS Security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top