Mystery in Shared Docs

[Joanne]

So we have a folder in the Geography area of our shared documents (also, learning resources - cc3). Now in this folder there are links to web pages... but for some reason they go missing... or deleted...

 

Now I'm trying to find them on the backup... but it aint working! Got it to restore last time though, even though there appears to be nothing in the folder.

 

So, what I am trying to ask is this: Can you find out who accesses the folder and who has deleted the stuff?

 

Is there a log somewhere?

 

Thanks... meanwhile I will trawl through many backups

[Geoff]

You must enable the security auditing, and track deletions.

[Ric_]

Or you could work out who has the access rights to delete the shortcuts... this will probably narrow it down to a handful of people and then just guess

[Michael]

I agree with the above comments. Verifying permissions narrows down who can delete the shortcuts.

 

Although auditing is good, you need to be specific what you want to audit, otherwise you'll get hundreds of logs which are absolutely useless.

 

The only other advice I can offer is make sure you verify backups after they've been performed. I'd also check logs regularly (if you don't already).

[Joanne]

well only teachers have the ability to delete... gonna change that to read only. Should sort out my problem!

 

They came back anyways...