Which User Account Deleted Folders and Files

[Guest]

We are running Windows Server 2000 Standard Edition. Our users here are running Windows XP on their PC's. We map everyone to a shared drive where they share all company files within department directories. The files are mostly Word and Excel. Every user has access to these files. Some how all of the data folders were deleted. We have since retreived the data, but how do we trace what user account deleted the files and when. Thanks - Shelley

 

[Chriss3]

This can be done if audit was turned on at the particular file server?

HOW TO: Use Group Policy to Audit Registry Keys in Windows 2000:
http://support.microsoft.com/?kbid=315416

HOW TO: Use Group Policy to Audit Registry Keys in Windows Server 2003:
http://support.microsoft.com/default.aspx?scid=kb;en-us;324739

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup

We are running Windows Server 2000 Standard Edition. Our users here are

running Windows XP on their PC's. We map everyone to a shared drive where
they share all company files within department directories. The files are
mostly Word and Excel. Every user has access to these files. Some how all of
the data folders were deleted. We have since retreived the data, but how do
we trace what user account deleted the files and when. Thanks - Shelley