Mystery deleted directories

[Guest]

here is my prooblem:

- file auditing is set up on the DC in the GPO
- directories haver recently been deleted ( twice in two weeks )
- created directory and deleted it myself and no footprints were created
- evt log does not show directory being deleted nor who connected to the
server to delete the directory or the files in it.

Has anyone experienced this or might have a configuration setting wrong here?
Please help. thanks

 

[Ray]

In the NT world, you have to enable auditing in the folder/file properties
that you want to monitor. How do the properties of the folder look?

Ray

 

[Guest]

Ray,

Is there any way to set at the GPO an auditing policy on JUST shares
throughout all of my servers? I do not want have to set auditing on all
folders on all my folders. Please let me know if this sounds weird.

thanks

 

[Ray]

As you may have inferred by my reference to NT, we aren't on AD so I don't
have a clue as to your question.

Ray