Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there some kind of software out there that can monitor a file share on a network and record who (computer/user or application) deletes or modifies files - as we are having issues with data going missing from a particular location.

I know this sounds a bit like I'm after a bit of FBI like software, but I just thought someone more knowledgeable than me may know what I am looking for or at least dispel my ideas that software like this is, is not even possible! :)

share|improve this question

closed as off topic by Sven, Dave M, pauska, Ward, kce Apr 22 '13 at 21:03

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 1 down vote accepted

Consider using Windows' built-in auditing features. Note that enabling auditing for filesystem objects would create a large amount of logs in most setups. You would either need a tool to handle that or sufficient expertise in scripting to craft such a tool on demand.

See the documentation on auditing for details.

share|improve this answer

This can be accomplished by using File Auditing

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.