Windows Thread, Deleted Shared Folder in Technical; Had a student come to me as saying he couldn't get onto the Student shared Homework to hand in folder. ...
29th January 2010, 03:35 PM #1
Deleted Shared Folder
Had a student come to me as saying he couldn't get onto the Student shared Homework to hand in folder. turns out its been deleted. Only me and the NM have permission to deleted the folders. and neither of us have done it, I haven't even used it ever, she was working on it at 11:00 its disapeared after that. it was there for this mornings shadow copy to take, but wasn't there for the 12:00 one.
Does anyone know how to find out who deleted a folder? is there a way of doing this? or is there something I could put in place which would tell me in the future if it happened again?
IDG Tech News
29th January 2010, 03:49 PM #2
AFAIK there's no way to retrospectively find out who deleted what.
If you want to keep a track, then you need to look at configuring auditing.
29th January 2010, 03:52 PM #3
I presume you've done a search in case it has accidentally been moved into another folder?
29th January 2010, 03:54 PM #4
you could look at the security logs for that computer, it may have some user names for that time period.
29th January 2010, 04:05 PM #5
It wasn't the actual folder which was deleted it was the subfolders. I just used this mornings shadow copy to get them back. I have no idea which computer it was deleted on, it just means that someone must have admin rights some how.
29th January 2010, 04:16 PM #6
A good time to change admin passwords, perhaps?
Originally Posted by neilmc
29th January 2010, 04:24 PM #7
Check the members of the Administrators group under Builtin accounts in AD? Quick way of checking nobody has promoted themselves - if there's nobody unexpected there, change admin passwords and switch auditing on
Originally Posted by neilmc
20th February 2010, 10:36 AM #8
When you have files/folders/subfolders that you dont want to dissapear you need to monitor them constantly. when i was a student i used a program "Connection Monior" (see here) in our university network. I always knew who, when and how often connects to my shared folders. it allowed me to audit changes in my folders: creating new files, deleting. from logs I could know who did that. It really helped
about your problem....its almost impossible to find out who has deleted it. But from this you can learn that you need to monitor shared data using extra software.
By aaronjwilkinson in forum Windows Server 2000/2003
Last Post: 2nd November 2009, 01:33 PM
By beeswax in forum Wireless Networks
Last Post: 18th December 2008, 11:06 AM
By TheWhiteWiltord in forum Windows
Last Post: 21st July 2008, 10:49 AM
By JPhillips173 in forum Scripts
Last Post: 17th April 2008, 12:25 PM
Last Post: 12th October 2006, 10:37 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)