RE: [ActiveDir] OT: Tracking File Deletes

[Feigin, Andrew]

Title: OT: Tracking File Deletes

Could you post this info when you find it?   -Andrew   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, February 08, 2006 12:11 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Tracking File Deletes   Chris, talk to me when you get home. I have a list of all the Event ID codes and what each means. I would pull them up now but it appears that the lovely cable company has dropped the internet connection again.   Bonnie   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of TIROA YANN Sent: Wednesday, February 08, 2006 11:56 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Tracking File Deletes Hello,   here is a good start http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/13w2kadc.mspx   Don not remember the eventid corresponding to file deletions, but after activated audit, try delete a file.directory and see in the security logs what eventid is generated for this event. Cordialement, Yann TIROA Centre de Ressources Informatique. Campus Scientifique de la DOUA. Bât. Gabriel Lippmann - 2 ème étage - salle 238. 43, Bd du 11 Novembre 1918. 69622 Villeurbanne Cedex. Web: www.univ-lyon1.fr     De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Pohlschneider, Chris Envoyé : mercredi 8 février 2006 17:31 À : ActiveDir@mail.activedir.org Objet : [ActiveDir] OT: Tracking File Deletes Sorry if this is a bit off topic, but I was wondering if there is a way to track file deletions off of a Windows 2000 SP4 file server? Chris Pohlschneider Network Administrator Cenveo-Sidney 937-497-2136 [EMAIL PROTECTED] Cenveo is your visual communications connection for a broad portfolio of services and products including eServices, envelopes, offset and digital printing, labels and business documents