|
Posted by Roger Abell [MVP] on June 21, 2007, 2:06 am
Please log in for more thread options
If logging of success for those actions on those NTFS targets was
not enabled prior to the event on the server with that storage, then
there is no information available natively via Windows.
The auditing would be recorded on that storage server, whether
the actions were via remote access or local.
Roger
> Hi,
>
> Someone accidentally or intentionally deleted some files and folders
> from network resource.
>
> Is there a alternate way to find out or log event on windows 2003
> other than event viewer for :
> In case :
> There is no auditing enabled
> Resource is a network drive
>
> Earliest help would be appreciated.
>
> Thank you
>
| 
XML Sitemap