Hello all.
In my local network, A user see my share partitions and files then removed them, How can I find who did it?
THanks.
Technology Tips and News
Hello all.
In my local network, A user see my share partitions and files then removed them, How can I find who did it?
THanks.
Hey
There is option with "Auditing".
Visit this article :
https://technet.microsoft.com/en-us/library/cc771395(v=ws.10).aspx
This question is duplicated (and answered) in:
how can track who deleted file/folder from Windows Server 2008
You need to enable auditing on file server that will let you track, who deleted the files ?
You may refer to this informative PDF guide that provides step-wise instructions to enable auditing and track all the critical changes activities into real time : https://gallery.technet.microsoft.com/How-to-enable-File-and-af674be4