Mystery deleted directories

[Guest]

Archived from groups: microsoft.public.win2000.file_system (More info?)

here is my prooblem:

- file auditing is set up on the DC in the GPO
- directories haver recently been deleted ( twice in two weeks )
- created directory and deleted it myself and no footprints were created
- evt log does not show directory being deleted nor who connected to the
server to delete the directory or the files in it.

Has anyone experienced this or might have a configuration setting wrong here?
Please help. thanks
--
Phil Network Admin

 

[ray]

Archived from groups: microsoft.public.win2000.file_system (More info?)

In the NT world, you have to enable auditing in the folder/file properties
that you want to monitor. How do the properties of the folder look?

Ray

"mingram27" <mingram27@discussions.microsoft.com> wrote in message
news:A24EC86F-F4F2-4FF3-8203-70DCD8ECB742@microsoft.com...
> here is my prooblem:
>
> - file auditing is set up on the DC in the GPO
> - directories haver recently been deleted ( twice in two weeks )
> - created directory and deleted it myself and no footprints were created
> - evt log does not show directory being deleted nor who connected to the
> server to delete the directory or the files in it.
>
> Has anyone experienced this or might have a configuration setting wrong
here?
> Please help. thanks
> --
> Phil Network Admin

 

[Guest]

Archived from groups: microsoft.public.win2000.file_system (More info?)

Ray,

Is there any way to set at the GPO an auditing policy on JUST shares
throughout all of my servers? I do not want have to set auditing on all
folders on all my folders. Please let me know if this sounds weird.

thanks

"mingram27" wrote:

> here is my prooblem:
>
> - file auditing is set up on the DC in the GPO
> - directories haver recently been deleted ( twice in two weeks )
> - created directory and deleted it myself and no footprints were created
> - evt log does not show directory being deleted nor who connected to the
> server to delete the directory or the files in it.
>
> Has anyone experienced this or might have a configuration setting wrong here?
> Please help. thanks
> --
> Phil Network Admin

 

[ray]

Archived from groups: microsoft.public.win2000.file_system (More info?)

As you may have inferred by my reference to NT, we aren't on AD so I don't
have a clue as to your question.

Ray

"mingram27" <mingram27@discussions.microsoft.com> wrote in message
news:08CFC060-9C17-4F37-AC87-E2888DE6B0C6@microsoft.com...
> Ray,
>
> Is there any way to set at the GPO an auditing policy on JUST shares
> throughout all of my servers? I do not want have to set auditing on all
> folders on all my folders. Please let me know if this sounds weird.
>
> thanks
>
> "mingram27" wrote:
>
> > here is my prooblem:
> >
> > - file auditing is set up on the DC in the GPO
> > - directories haver recently been deleted ( twice in two weeks )
> > - created directory and deleted it myself and no footprints were created
> > - evt log does not show directory being deleted nor who connected to the
> > server to delete the directory or the files in it.
> >
> > Has anyone experienced this or might have a configuration setting wrong
here?
> > Please help. thanks
> > --
> > Phil Network Admin