Urgent Help!!! Year 10 folders have been deleted

[StewartKnight]

Some of the Y10's have had their folders deleted (I'm assuming that a teachers password has been breached)

Is there a log in windows 2k3 that can tell me who did it.
Thanks

How come your satff have delete access to the users root folder?

[tosca925]

Have you double checked they have no just been moved by a memebr of staff accidently, I had this happen to me yesterday, i did a search on the years home directories and they had been dropped inside some other pupils.

Just a thought.

And teachers complain when we don't give them access?

[mark]

Mine do too - so that they can mark work.

[StewartKnight]

does anyone know which log please!!!!!

[Ric_]

@StewartKnight: You need to have enabled auditing of file deletion - not something that is enabled by default. If it was enabled it will be in the System(?) log.

I would also check that the little darlings haven't deleted their own work - always liekly!

Otherwise it will be a Shadow Copy restore or restore from backup.

[StewartKnight]

I've done a backup, I just want to nail the person who did this on day 1 of our Ofsted inspection!!!

[Ric_]

If you have Shadow Copy enabled, you can find out when the volume changed to not having the folders and cross-reference that with who was logged on

[sahmeepee]

@StewartKnight: You need to have enabled auditing of file deletion - not something that is enabled by default. If it was enabled it will be in the System(?) log.

Yep, but I think it's in Security rather than System. Even if you enable the auditing option you need to enable auditing on the folder/file as well. Pretty unlikely to do that by accident.

[E1uSiV3]

Teachers have read only here for several reasons...

They dont need write access to mark work, if they need to leave comments they could always create a doc elsewhere or print and write on it... thres also issues about the fact teachers could "improve" the students work for them and its hard to proove otherwise.

[tarquel]

Same reasoning here E1uSiV3

I have it so that teachers have read only access to the entire pupils home folders but no create or write permissions

There's also the issue that teachers could delete certain work if a pupil upset them [or whatever the reason]

We have a pool drive where teachers leave resources and work and the pupils can only read the drive [a vice versa situation I guess hehe].

Never had any complaints about that side of things yet

Cheers
Nath

[russdev]

dotn give them access at all we have shared area where teacher can creste a handing in point which students can write but not modify and teachers can access..

russ

[tarquel]

The point of having it read only allows them to check to see whether any work has been done - etc.

I did set up a submitting / for marking folder in the pool drive for this purpose - think i might make it more obvious - putting it in the route of the pool drive.

This folder I'm thinking will be:
Pupils = Write only [to prevent pupils looking at other pupils work]
Staff = Read & Modify
Administrator = No Access [lol only jokin ]

Sorry this is no help to your question Stewart

Cheers
N.

[StewartKnight]

you raise a good point though Nath, I'll lower the teachers permssions!