file delete history log

  • Thread starter Thread starter Mark
  • Start date Start date
M

Mark

Hi,

Some files have been deleted from a networked machine, they are not in the
recycle bin so I am presuming they have been deleted across our internal
network. I have managed to recover most of them and now know a time when
they were deleted. Is it possible to trace whch computer/user who deleted
the files with an XP utility such as the event viewer?
 
Mark said:
Hi,

Some files have been deleted from a networked machine, they are not in the
recycle bin so I am presuming they have been deleted across our internal
network. I have managed to recover most of them and now know a time when
they were deleted. Is it possible to trace whch computer/user who deleted
the files with an XP utility such as the event viewer?
Click to expand...

Do you have auditing turned on at the server?

Malke
 
Mark said:
We do not hav a server, just a local network.
Click to expand...

Then no, you aren't going to be able to find out who did it since no one logs
onto that machine as they would in a domain.

Malke
 
Thanks for your help. Do you know of a way to log in the future without a
server?

I want to catch whoever is doing this, things just don't delete on their own!
 
Back
Top