Finding out who renamed a folder

[tosca925]

We have had a series of folders renamed in a staff area. We have gone through all the usual ways to find out who has done this but nothing shows up. Is there any way that you know to that will help us find out who could have done this?

[plexer]

Probably not as I would have thought file and folder auditing would needed to have been in place before the event.

 

Ben

[acrobson]

Probably not as I would have thought file and folder auditing would needed to have been in place before the event.

 

Ben

I would agree, I am guessing you have already tried this but, have you tried doing a search for anyone who last accessed the folder within their 'recent documents etc'. You can probably compile a VBS to to search the specifics.

[tosca925]

You can probably compile a VBS to to search the specifics.

 

This would be really useful if someone could do this for me?

[acrobson]

You can probably compile a VBS to to search the specifics.

 

This would be really useful if someone could do this for me?

I shall see what i can do, if not, i have a few bods who owe me a favor or 5000!

[tosca925]

cheers m8

[Andrew_C]

I'd love to know which idiots drag a folder, rather than double click it; dropping it inside something else. :-(

[srochford]

Not sure if writing a script to check "recent" will help - it only seems to put things in there which you have opened, not if you just drag them. As the dragging tends to happen by "mistake" and the perso who does it won't then find the folder and open it, you could spend a long time searching and finding nothing :-(

 

The only way I can really think of that would work is to enable auditing but the trouble with this is that you will end up with a huge log to search. Most of what's there will just be "noise" so you just lose track of what matters.

 

I'd love to slag off Microsoft for this :-) but I don't suppose it's really fair - how can you have a system which knows that user X dragging a folder into another folder is perfectly reasonable but user Y dragging the same folder is just clumsiness??