Who deleted a folder?

[JPJeffery]

Is there a way to audit who deleted a folder on a server share?

JJ
[small][purple]Variables won't. Constants aren't[/purple][/small]

 

[brontosaurus]

You can get close. If you turn on auditing at the "object access" level from the local computer policy, you can see who last touched the directory. Then you can turn on auditing at the folder level to get more detailed info.

 

[Mellors]

Yes. Unfortunitly you need to do this before you find a folder has vanished! Often I find that somebody has accidentally moved the folder into another folder in that tree.

 

[JPJeffery]

> "...Often I find that somebody has accidentally moved the folder into another folder in that tree..."

And that's usually what happens here as well. Will that be picked up in the auditing too?

JJ
[small][purple]Variables won't. Constants aren't[/purple][/small]

 

[Mellors]

Just looked at the autiding options and I dont think it will. :-(

--
Everything has about a 50:50 chance of working.
Either it will, or it wont!

 

[JPJeffery]

Darn.

Oh well, not a biggie, just a nice-to-have.

JJ
[small][purple]Variables won't. Constants aren't[/purple][/small]