Public Data going missing

[AceDaz]

You know what teachers are like - they want the easiest way possible.

 

Our ICT Teachers use the Public area for their Homework Submissions. But for some reason they want to use it for live work as well. They have got each kid to create a folder within their name and under each of the modules - AO1 / AO2 etc

 

So its

 

Public

|

|Homework Submissions

|

|MR Bloggs

|

|AO1

| |

| |Miss Pupil

| |Mr Pupil

|

|AO2

| |

| |Miss Pupil

| |Mr Pupil

 

 

etc

 

But the teacher is claiming that the work is going missing. There is no RAID errors or anything in the Event Logs, so it MUST be getting deleted. He has done a search on the network and it's not there.

 

I know in Novell 3.x (I am not sure about the newer ones) that you can "Salvage" the files, this is not a problem as we use shadow copies, BUT the other useful function of "Salvage" is that it showed which user deleted the files.

 

Is there anything like this in Windows Server 2003?? This is happening on a regular occurance.

 

I know everything about user areas and setting levels of security, but its not easy to control when you have 6 ICT Teachers changing things and adding folders etc.

[rh91uk]

Would be very interested to know this too as we seem to be getting exactly the same problem ... instead though, teachers seem to INSIST that no one is deleting the files!

[jamesb]

You can audit object access: How to audit user access of files, folders, and printers in Windows XP

 

That might do what you're after.

 

Edit: Right link this time: http://technet.microsoft.com/en-us/library/cc776774(WS.10).aspx

[SpuffMonkey]

Yep - turn on auditing - these things strangely stopped when we could prove who had done what. I'd recommend grabbing "System Change Log" from System Change Log

 

It makes it a lot easier to read

[elsiegee40]

Are you using Volume Shadow Copy?

 

If so, using Previous Versions, it should be easier to trace whether or not the document ever made it into the folder.

 

Our Volume Shadow Copy happens twice daily at noon and 7pm, which gives me a reasonable idea whether or not a document made it into the folder and the end of a lesson.

[ricki]

Hi

 

If you are going to turn on auditing make it known to the management and get the ok. Staff will find out like wild fire and this in itself sometimes stops things.

 

Richard