Utility to determine who deteled files

From: Gooch, Linnie (Linnie@wescom.org)
Date: 02/25/03

  • Next message: Holmes, Tyran: "RE: MS ISA Logs - Listing IP Addresses v. NetBIOS names" 
    From: "Gooch, Linnie" <Linnie@wescom.org>
To: focus-ms@securityfocus.com
Date: Tue, 25 Feb 2003 10:00:22 -0800

    Sorry in advance if this is too simple of a question, but does anyone know
    of a utility to put on a Windows NT / 2000 server to determine who deleted a
    file and when? I know auditing does this, but is very cumbersome and hard to
    read.

    Thanks..

    Linnie Gooch, MCSE
    Assistant Manager of Systems and Technology
    Wescom Credit Union
    (888) 493 7266 x 8801

    **********************************************************************
    This email and any files transmitted with it are confidential
    and intended solely for the use of the individual or entity to
    whom they are addressed. If you have received this email
    in error, please delete it immediately and advise the sender.
    WESCOM CREDIT UNION (626) 535-1000
    **********************************************************************

    Relevant Pages

    • Re: Purpose of sectionGroups "type" attribute in "web.config"
      ... file) to the remote VSS server, probably due to its size (we're guessing at ... Windows - IUSR_MACHINENAME where appropriate, etc. - Various folders may be ... mixtures of old and new technology). ...
      (microsoft.public.dotnet.framework.aspnet)
    • VPN General Question
      ... I'm new to this newsgroup and to Windows 2000 Server technology, ... only 2 or 3 people will need to access the program files ...
      (microsoft.public.windows.server.networking)
    • Re: Newbie Question
      ... users can access their desktops using TS technology. ... The OS running on the desktop must be at least Windows XP. ... "Ace" wrote in message ... Also the server we are looking in have Terminal ...
      (microsoft.public.windows.terminal_services)
    • Re: ADAM on W2K
      ... .NET 1.1 runs on Windows 2000 ... Server and it is new technology. ... You can host ADAM in a virtual instance of Virtual PC running ...
      (microsoft.public.windows.server.active_directory)
    • SecurityFocus Microsoft Newsletter #154
      ... MICROSOFT VULNERABILITY SUMMARY ... ISS RealSecure Server Sensor SSL Denial Of Service Vulnerabi... ... Roger Wilco Remote Server Side Buffer Overrun Vulnerability ... available for Microsoft Windows operating systems. ...
      (Focus-Microsoft)