Unless you have file auditing turned on, I believe you're kinda snookered. Anyone with the Delete privilege is a suspect
2009/7/15 Robert LeBlanc <[email protected]> > Hi all, > > > > Is there an easy way to see who deleted files from a networks drive. I’ve > been able to restore the files from backup but we’d like to know who deleted > initially. The server is Win2K. > > > > Thanks, Robert > > > > Robert LeBlanc > > Network Administrator MCP,MCSE > > Anesthesia Associates of New Mexico, P.C. > > (P)505-260-4300 > > (F)505-260-4338 > > (E)[email protected] > > > > > ******************************************************************************************** > > > ******************************************************************************************** > > Please note that the information contained in this message may be > privileged and confidential and protected from disclosure. If the reader of > this message is not the intended recipient, or an employee or agent > responsible for delivering this message to the intended recipient, you are > hereby notified that any dissemination, distribution or copying of this > communication is strictly prohibited. If you have received this > communication in error, please notify us by replying to the message and > deleting it from your computer. Thank you. Anesthesia Associates of New > Mexico, P.C. > > > > > > > > > > > > > > -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." http://raythestray.blogspot.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
