Folder Deleted - who dunnit?

  Terrylr 13:03 07 Mar 2007

Hi all,

I wonder if some kind person could help me with this problem?

On our Windows 2003 server someone has deleted a folder within a share.

How can I find out what user did this?

something in Active Directory?

Many Thanks

  xania 14:07 07 Mar 2007

Don't know for certain, but you mau get all you need from <Control Panel><Administrative Tools><Event Viewer>

  Aspman 14:32 07 Mar 2007

If you can find out when it was deleted check the file permissions on the folder and who had access to it and cross that against the event logs showing when the users were logged in.

If everyone has access to the share and you don't have the event log settings configured to log file deletions as an even (which you probably don't) then you're stuffed.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Best phone camera 2017

Stunning new film posters by Hattie Stewart, Joe Cruz & more

iPad Pro 10.5in (2017) review

28 astuces pour profiter au mieux de votre iPhone