windows 2000 server idiotic question
 

I can't beleive i'm asking this question but I can't find the answer

in this office -we have a user or two who keep deleting files that they shouldn't be deleting.. only we can't figure out who's doing the delete... and turning off delete access isnt an option because they do need to delete files occassionally.

What I need is a utility or something for windows 2000 server that will basically log what's being done on the server - file adds are fine -but i carem ore abouot file deletes

know of anything?

How many possible users could it be?

How often does this occur?

yes, you need to enable auditing on the volume and then audit the specific actions that you want to monitor.

let me toss win2k server into a virtual machine and get you some steps.

Ok, inside of the control panel, open administrative tools, then local security policy. Under local policies, open audit policy, double click audit object access, and check success and failure. This enables the auditing. Now we need to tell it what to audit.

browse to the folder you want to manage and right click, then select properties, then the security tab, then the advanced button, then the auditing tab, now add the users and the actions you want audited, Either a user or a group.

Now, open the management console (right click my computer then select manage) and select the event viewer then the security section, all events will be logged here.