Deleted Files -Help!

[Guest]

I came in this morning to discover that MANY files had been deleted over the weekend. Is there any way to find out who deleted them, and is there a way to track files deletions in the Event Viewer in the future?

 

[Steven Umbach]

You would first need to enable auditing of object access on a computer and then
configure auditing on specific folder/files. Be sure to only audit for deletion
to keep number of events down as you can end up with a tremendous amount of
events in the security log in Event Viewer. Don't try to audit everything - just
what is needed. See the link below for more info and try it out on a test
computer so you can see all is entailed. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
http://www.microsoft.com/technet/security/guidance/secmod144.mspx

I came in this morning to discover that MANY files had been deleted over the

weekend. Is there any way to find out who deleted them, and is there a way to
track files deletions in the Event Viewer in the future?