Re: Security problems
- From: "David Lee Conley" <conley3500@xxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 18 Jul 2006 20:00:27 GMT
This solution won't help figure out who deleted the ones that were already
deleted, but if you're using a Windows server, I know you can set security
audits to store information in the Security Event Log for those people who
use their Delete permission.
This link might help:
http://technet2.microsoft.com/WindowsServer/en/Library/5658fae8-985f-48cc-b1bf-bd47dc2109161033.mspx?mfr=true
Also, if the information in a project folder is important, only management
and IT administrators should be granted permissions for file deletion. All
others should be implicitly denied delete permission (i.e., clear the permit
box for the delete permission).
Dave
"Massblue" <Massblue@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0E1A65A3-A9D9-4ED0-87EE-42E1A80F8FC9@xxxxxxxxxxxxxxxx
Hey people, anyone know how to check who deleted files from a network
share,
The permissions allow all users to delete files within folders, someone
has
managed to delete various files all over the place within a major project
folder.
I have managed to restore the project from backups and Winundelete
Only thing i that the files were on a NAS and i have no idea where to look
to find who deleted the files.
Help please...
.
- Follow-Ups:
- Re: Security problems
- From: Brian Hampson
- Re: Security problems
- Prev by Date: Re: Getting the Access Permissions for a specific SID on a File / folder
- Next by Date: Re: Security problems
- Previous by thread: CreateProcessWithLogonW and Desktops
- Next by thread: Re: Security problems
- Index(es):
Relevant Pages
|
