Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a strange problem in our company. Sometimes it happens that a folder it's been deleted from our NAS. It's happened 2 times this month, 1 st time samba logs identified client_A, the second one it identified client_B...

Owners of the clients said that they were at lunch or that they didn't had any access to this folder...

How i can find the problem? Why it happens on the same folder from different clients?

share|improve this question
Do you believe your users? Anyway...scan their pc with antivirus! – lg. Jul 15 '10 at 14:55
CAT-LIKE TYPING DETECTED – jscott Jul 15 '10 at 14:56

First of all as House MD says "everybody lies".

Logs, on the other hand, don't lie. If you see user A in logs, that means user A deleted the folder/file, or someone else had access to user A's credentials (or computer).

And one more thing ... users like hitting buttons at random. I also had deleted files/folders on my NAS and noone took the "credit" for the action ... than, a few days/weeks later while I was troubleshooting a user, I observed that he tried to use some shortcuts and sometimes it worked, sometimes he miss-hit some buttons and got an attention/messagebox and hit "YES" by default ...

Users don't read messageboxes ... so if you want to be safe, don't let them delete important stuff and make regular backups.

share|improve this answer
Sometimes they don't even delete them, they just fail at double clicking and drag the folder off it to some other obscure folder. – The Digital Ninja Jul 15 '10 at 15:27
@The Digital Ninja, I had a boss that dragged folders at least once a month. – Chris S Jul 15 '10 at 15:52

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.