Is it possible to tell who deleted files?

[jim]

I was wondering with the shadow copy, could you tell which user
deleted the files?
We had a server who had some data deleted off the general drive and
we can retrieve them via Shadow Copy or previous versions. But be handy
to know who deleted them in the first place.

Thanks,
Jim.

 

[Jerold Schulman]

I was wondering with the shadow copy, could you tell which user
deleted the files?
We had a server who had some data deleted off the general drive and
we can retrieve them via Shadow Copy or previous versions. But be handy
to know who deleted them in the first place.

Thanks,
Jim.

See tip 4002 » How do I Set, View, Change, or Remove auditing for a file or folder in Windows 2000?
in the 'Tips & Tricks' at http://www.jsifaq.com