Tracking who deleted file 1

[pgk]

Hi

We have a shared folder on a Windows 2000 server. We find that some files get deleted on a repeated basis. I am wondering if there is a way as to track who/what process deletes the file? The key here is that this is a shared folder and people need not login to do this.

Thanks a lot

 

[GrimR]

On DC goto policies and enable object access policies, for the rest of the explanation read this

http://support.microsoft.com/kb/325898

 

[ITPangaeaArchitect]

you also need to enable auditing at the folder level itself. setting the policy itself wont do the trick. that should be explained in that article though

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.

 

[technome]

Pgk....
You might look into Executive software's "Undelete", tracks offenders, and gives the ability to restore deleted files and multiple revisions, great program.


........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm