There is a shared drive Z:. Everyday a few files get written to it. I assume by a cronjob, or a windows task. Since the shared drive and the folders in it are public, those files could be generated on any server in the network, and written to the shared drive. Now, I can't find which server is generating them... How could I find out where the files are coming from?

  • 1
    To start, look at the owner of the file in the file's security properties. Otherwise, turn on file auditing for the share and check it the next time the file(s) appear. – Ƭᴇcʜιᴇ007 Nov 24 '14 at 19:47
  • Or, just turn off that shared drive and wait for someone to complain :P – Steve Nov 24 '14 at 20:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.