3

Is there any way to see if a user deleted a folder in a shared resource (we have Active Directory)?

I need to see if someone is removing folders or if they do actually "magically disappear".

Improve this question

2 Answers 2

Reset to default
0

I'm sure you should be able to audit the delete events.

In Group Policy audit for Object Access - Success.

Then at the folder you want to trigger the events, set the Audit for successful deletion of files and folders. Here is a website that talks about that.

When a file/folder is deleted, an event log entry will be made. You may have to search through the event log entries to find the specific file/folder of interest.

Improve this answer
1

There's an "inspection" tab in the advanced security properties, though you need to configure group policy in addition to this.

Improve this answer
2
  • How to set up this group policy?
    – rkl
    Nov 7, 2011 at 13:09
  • Unfortunately I have no idea :(
    – kinokijuf
    Nov 7, 2011 at 14:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .