Windows 2003 Server OS Event viewer issue

[jagsrao]

Hello,

We have a client-server tool installed in Windows 2003 server. This is an enterprise tool and the database used is flatfile system. What we have noticed that suddenly, some of the files goes missing in the database. They are deleted from the database. We have used Auditing feature which is turned ON for File/folder Delete. It is enabled for "Everyone".
The surprising thing is that when we login to the system and delete a file, the even gets registered in the event viewer. We have one more third party tool which keeps a watch on the database. It registers all the file deletes. But the same is not getting registered in Event viewer. WHat could be the issue and how to trace the culprit ?

Any help will be highly appreciated.

Thanks

Jagdish

 

[karlisi]

You should enable auditing also in Group Policies
Local Policies -> Audit Policy -> Audit object access
Check 'Success'

===
Karlis
ECDL; MCSA