Tracking deletion of files - Windows 2003 server

[Halfmad]

Hi all,

Just curious if there's a way of tracking who deletes files and when on 2003 server, I'm not wanting to do it with pupil data purely with staff data.

I seem to have spent a good few hours recently restoring files that have magically vanished and as usualy nobody is admiting fault. I have a feeling it's the same 3 or 4 people who are at fault.

Would auditing be able to do this?

[Geoff]

You can do this with the file auditing. However you will generate huge amounts of logs that you will have to process and sort through.

[Halfmad]

cheers geoff, I'll look into it and try to limit it to a few folders that seem to be the ones targetted by the "ghost of file deletion" recently

[SpuffMonkey]

I'd ercommend you use it with System Change Log -

http://www.greyware.com/software/systemchangelog/

It makes it loads easier to see what went on!

[Halfmad]

Cheers Spuff!

[richard.thomas]

Just the thing I've been looking for!! Some how someone/something keeps deleting our intranet.
It's weird, if it was just the files then i'd quickly assume someone has gained access somehow, but it's the entire folder from the wwroot folder... Any ideas?

[alan-d]

I don't suppose there is a free version (more than a 30 day trial) of this is there?