Hello,
here is a good start http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/13w2kadc.mspx
Don not remember the eventid corresponding to file deletions, but after
activated audit, try delete a file.directory and see in the security logs what
eventid is generated for this event.
Cordialement,
Yann TIROA
Centre de Ressources
Informatique.
Campus Scientifique de la DOUA.
Bât. Gabriel Lippmann - 2
ème étage - salle 238.
43, Bd du 11 Novembre 1918.
69622 Villeurbanne
Cedex.
Web: www.univ-lyon1.fr
De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Pohlschneider, Chris
Envoyé : mercredi 8 février 2006 17:31
À : ActiveDir@mail.activedir.org
Objet : [ActiveDir] OT: Tracking File Deletes
Sorry if this is a bit off topic, but I was wondering if there
is a way to
track file deletions off of a Windows 2000 SP4 file
server?
Chris Pohlschneider
Network
Administrator
Cenveo-Sidney
937-497-2136
[EMAIL PROTECTED]
Cenveo
is your visual communications connection for a broad portfolio of
services
and products including eServices, envelopes, offset and digital
printing,
labels and business
documents
