11

On one of our servers we have a file that keeps mysteriously getting deleted. What I'd like to do is have a program watch this file and let me know when/how/by whom it gets deleted. We have a backup of the file in question, so it's not much trouble to put it back, but it results in downtime on our websites.

Is there software that does this? Something free maybe? OS is Windows Server 2003 SP2 32 bit.

4 Answers 4

16

You don't need any third party software. You need to turn on object access auditing and set the auditing options on the file(s) and or folder(s) you want to monitor.

1
  • The link appears to have rotted.
    – 84104
    May 29, 2018 at 17:26
0

There is auditing built in that might suit your needs - I've not got a 2k3 box to hand at the moment, but from memory you can go to folder properties -> security -> advanced -> auditing and then add in auditing there

0

There are a number of programs that can help you with that:

  • Power Admin's PA File Sight
  • Netfort's LANGuardian
  • ISDecisions' FileAudit
  • NetWrix File Server Change Reporter

among others.

-3

I would start with an internal audit of the company. Someone on your staff may be deleting the file, and perhaps causing other harm that you have not yet discovered. Question everyone that has access to the machine in question, and perhaps temporarily remove people's credentials to see if the problem suddenly goes away.

6
  • 2
    While I admire your finely-tuned paranoia, this is probably the last step (if at all), after a nice bit of file auditing. User-screwup witch-hunts by IT are rarely appreciated. Sep 1, 2009 at 17:59
  • 2
    Just tried this - I think I made some enemies now.
    – dubRun
    Sep 1, 2009 at 18:12
  • @dubRun double LOL :)
    – drAlberT
    Sep 1, 2009 at 18:13
  • So I guess my answer is the accepted answer? Sep 1, 2009 at 18:18
  • 3
    Sorry, I didn't get any results from this answer - just enemies. Jeff in development isn't too happy with my interrogation techniques
    – dubRun
    Sep 1, 2009 at 18:19

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .