I came in this morning to discover that MANY files had been deleted over the weekend. Is there any way to find out who deleted them, and is there a way to track files deletions in the Event Viewer in the future?
You would first need to enable auditing of object access on a computer and then
configure auditing on specific folder/files. Be sure to only audit for deletion
to keep number of events down as you can end up with a tremendous amount of
events in the security log in Event Viewer. Don't try to audit everything - just
what is needed. See the link below for more info and try it out on a test
computer so you can see all is entailed. --- Steve
weekend. Is there any way to find out who deleted them, and is there a way to
track files deletions in the Event Viewer in the future?
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.
