Can I see if and when a file was deleted on Windows Server 2003?

Posted by user316687 on Server Fault See other posts from Server Fault or by user316687
Published on 2012-09-24T20:25:59Z Indexed on 2012/09/24 21:39 UTC
Read the original article Hit count: 197

Filed under:

On Windows Server 2003, is there a way to see if and when a file was deleted?

It's a web server with IIS, our web application let our users to load Word documents into server. However, we found that one Word file is missing, and would like to know is it was deleted or never existed (web app could'nt load it).

EDIT:

I tried to follow this:


Enable auditing the folder you want to keep track of. Just right click on the folder, go to “sharing and security”, then “security” tab, at the bottom click on “advanced”. Select the auditing tab, click add, select the group or users to track, then pick what actions you want to track.

To track file deletion you would enable:

Create files/Write data Success/Fail Create folders / append data Success/Fail Delete Subfolders/Files Success/Fail Delete Suceess/Fail


This one will apply from now on, past actions wouldn't be able to track?

© Server Fault or respective owner

Related posts about windows-server-2003