How can I find who deleted my files?

Hello all.

In my local network, A user see my share partitions and files then removed them, How can I find who did it?

THanks.

February 13th, 2015 9:57pm

Hey

There is option with "Auditing".

Visit this article :

https://technet.microsoft.com/en-us/library/cc771395(v=ws.10).aspx


Free Windows Admin Tool Kit Click here and download it now
February 13th, 2015 10:10pm

This question is duplicated (and answered) in:

how can track who deleted file/folder from Windows Server 2008

regards

  • Proposed as answer by Ishmar Friday, February 13, 2015 9:58 PM
February 14th, 2015 12:58am

You need to enable auditing on file server that will let you track, who deleted the files ?

You may refer to this informative PDF guide that provides step-wise instructions to enable auditing and track all the critical changes activities into real time : https://gallery.technet.microsoft.com/How-to-enable-File-and-af674be4

Free Windows Admin Tool Kit Click here and download it now
February 16th, 2015 6:16am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics