Tracking down missing files and the toad who deleted them

  • Thread starter Thread starter Nobody in particular
  • Start date Start date
N

Nobody in particular

Someone on my home network or maybe at my pc deleted files. How can I
determine when this was done or if it was done from another computer?
They're not in the recycle bin.
 
Windows XP does not maintain a log of who or when
files were deleted from a computer.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

-----------------------------------------------------------------------------------

:

| Someone on my home network or maybe at my pc deleted files. How can I
| determine when this was done or if it was done from another computer?
| They're not in the recycle bin.
 
As Carey said. But, in future you can set auditing for selected folders/files (for XP Pro only)

How To Audit User Access of Files, Folders, and Printers in Windows XP:
http://support.microsoft.com/default.aspx?scid=kb;en-us;q310399&sd=tech

Microsoft Windows XP - Set, view, change, or remove auditing for a file or folder:
http://www.microsoft.com/resources/...all/proddocs/en-us/acl_audit_file_folder.mspx

Once you gather the required details, you should turn off auditing for the object(s), otherwise the Security log will become full very soon.

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


Someone on my home network or maybe at my pc deleted files. How can I
determine when this was done or if it was done from another computer?
They're not in the recycle bin.
 
Is there any way to tell what time somebody used a pc? So I could
tell if it was during the middle of the night?
 
Back
Top