Is it possible to track down who or what changed a shared permission?

Posted by user45574 on Server Fault See other posts from Server Fault or by user45574
Published on 2010-07-15T09:11:15Z Indexed on 2010/12/27 18:55 UTC
Read the original article Hit count: 188

Filed under:

Today I received an email from one of my users asking why he couldn’t access his shared folder on one of our servers.

Example: \\servername\share\ = access denied.

When I checked the share permissions on the folder I was surprised to see that the user had been removed from the "shared permissions" list.

Now my question is: Is it possible to track who or what deleted the users share permissions on the folder?

I have studied the different event logs, but couldn’t find any indication of anyone who had changed the share permissions.

Kind Regards Martin

© Server Fault or respective owner

Related posts about windows-server-2003