file delete history log

[Mark]

Hi,

Some files have been deleted from a networked machine, they are not in the
recycle bin so I am presuming they have been deleted across our internal
network. I have managed to recover most of them and now know a time when
they were deleted. Is it possible to trace whch computer/user who deleted
the files with an XP utility such as the event viewer?

 

[Malke]

Hi,

Some files have been deleted from a networked machine, they are not in the
recycle bin so I am presuming they have been deleted across our internal
network. I have managed to recover most of them and now know a time when
they were deleted. Is it possible to trace whch computer/user who deleted
the files with an XP utility such as the event viewer?

Do you have auditing turned on at the server?

Malke

 

[Mark]

We do not hav a server, just a local network.

Do you have auditing turned on at the server?

Malke

 

[Malke]

We do not hav a server, just a local network.

Then no, you aren't going to be able to find out who did it since no one logs
onto that machine as they would in a domain.

Malke

 

[Mark]

Thanks for your help. Do you know of a way to log in the future without a
server?

I want to catch whoever is doing this, things just don't delete on their own!

 

[Malke]

Thanks for your help. Do you know of a way to log in the future without a
server?

I want to catch whoever is doing this, things just don't delete on their
own!

Install eBlaster on each workstation.

www.spectorsoft.com

Malke