Is it possible to track down who or what changed a shared permission?
Posted
by
user45574
on Server Fault
See other posts from Server Fault
or by user45574
Published on 2010-07-15T09:11:15Z
Indexed on
2010/12/27
18:55 UTC
Read the original article
Hit count: 188
windows-server-2003
Today I received an email from one of my users asking why he couldn’t access his shared folder on one of our servers.
Example: \\servername\share\ = access denied.
When I checked the share permissions on the folder I was surprised to see that the user had been removed from the "shared permissions" list.
Now my question is: Is it possible to track who or what deleted the users share permissions on the folder?
I have studied the different event logs, but couldn’t find any indication of anyone who had changed the share permissions.
Kind Regards Martin
© Server Fault or respective owner