Can I tell/track which user moved folders?

[kopja]

Hi all

We have a Windows Server R2 2003 file server, and a 2003 STD domain controller server on our network.

We have a shared drive (on the file server) to which everyone (domain users) has full access, as they need to write/delete create new files and folders. However, recently it seems that a user is trying to be funny (or perhaps just has a sticky mouse and drags/drops folders) and is moving folders around.
As it is a huge drive, and the folder tree is very complex, we spend hours trying to put back everything the way it was.

Is there a way to tell which user moved the folders?
Or perhaps is there a third party tracking tools to purchase that does this?

Thanks in advance

 

[1LUV1T]

I just downloaded File Alert Monitor v 2.0 because I wanted to implement the same thing. I HAVE NOT USED IT YET. but try it, its less then 2mb and sits on the server (and is freeware).

 

[technome]

Look into Executive Software's "Undelete"


........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm

 

[kopja]

The File Alert Monitor website looks kinda shady, but will give it a try.

For the undelete, I am not worried so much about losing files as I have nightly backups plus shadow copy enabled, but I want to track down the user(s) who is doing this.

 

[1LUV1T]

hmm not sure why it's shady, I'm pretty sure I found a link to it from a professional technology source such as ComputerWorld or TechRepublic. Not sure though, as it's been a while.

 

[elmurado]

Why not try here as well:

http://technet2.microsoft.com/windowsserver/en/technologies/featured/audit/default.mspx

Windows server has some native auditing features which work really well.