Is it possible to find out who deleted a file under W2K/NT??

From: Truesdale, Larry [GRWAY:X261:EXCH] (larrytru@americasm01.nt.com)
Date: 05/28/02


From: "Truesdale, Larry [GRWAY:X261:EXCH]" <larrytru@americasm01.nt.com>
Date: Tue, 28 May 2002 10:36:36 -0500

Hello,

A couple of files have been deleted from my Win 2K machine. Is it possible
to figure out which account was used to deleted them? I'm not particularly
interested in recovering them, just knowing who deleted them.

Thanks!!

Larry



Relevant Pages