|
Posted by Roger Abell [MVP] on April 19, 2006, 9:48 am
If you were Registered and logged in, you could reply and use other advanced thread options
Assuming you are using NTFS for the filesystem, go to the root of
the area to be monitored, enter its NTFS permissions dialog, click
on Advanced and select the Audit tab. There, define a audit entry
for Everyone for successful Delete. Resist the tempation to make
this more than Delete as you can generate many many messages.
Next, go into the Local Security Policy and verify that audit is on
for Success (and Failure if you wish) of Object access.
> Hi there
>
> I'm having a problem on our network with some folders dissapearing during
> the day. I suspect that these are being deleted by users. Please can
> somebody
> advise me how to turn on auditing so I can find out which user is either
> deleting or moving the files/folders? We're currently running Windows 2003
> Server.
>
> Any help is greatly appreciated.
>
> Kind Regards
>
> Gareth Saunders
| 
XML site map