Can I see if and when a file was deleted on Windows Server 2003?
Posted
by
user316687
on Server Fault
See other posts from Server Fault
or by user316687
Published on 2012-09-24T20:25:59Z
Indexed on
2012/09/24
21:39 UTC
Read the original article
Hit count: 201
windows-server-2003
On Windows Server 2003, is there a way to see if and when a file was deleted?
It's a web server with IIS, our web application let our users to load Word documents into server. However, we found that one Word file is missing, and would like to know is it was deleted or never existed (web app could'nt load it).
EDIT:
I tried to follow this:
Enable auditing the folder you want to keep track of. Just right click on the folder, go to “sharing and security”, then “security” tab, at the bottom click on “advanced”. Select the auditing tab, click add, select the group or users to track, then pick what actions you want to track.
To track file deletion you would enable:
Create files/Write data Success/Fail Create folders / append data Success/Fail Delete Subfolders/Files Success/Fail Delete Suceess/Fail
This one will apply from now on, past actions wouldn't be able to track?
© Server Fault or respective owner