Thursday, December 13, 2012 7:22 AM
Can anyone please tell me what events are logged when a share is created and deleted in windows server 2008?
Thursday, December 13, 2012 7:43 AM
Check out event id's 560, 562 and 564
Check out this links below:
Every second counts..make use of it.
Thursday, December 13, 2012 7:59 AM
Thanks for the answer - its not quite what I'm after though.
I'm actually trying to answer the question "who stopped sharing that folder" rather than "who deleted that file".