What events are logged when a share is created or deleted
-
Thursday, December 13, 2012 7:22 AM
Can anyone please tell me what events are logged when a share is created and deleted in windows server 2008?
Regards
All Replies
-
Thursday, December 13, 2012 7:43 AM
Check out event id's 560, 562 and 564
Check out this links below:
http://sogeeky.blogspot.sg/2006/07/how-to-audit-and-track-file-deletions.html
http://blogs.technet.com/b/askds/archive/2009/08/04/tracking-a-remote-file-deletion-back-to-the-source.aspx
Every second counts..make use of it.
-
Thursday, December 13, 2012 7:59 AM
Thanks for the answer - its not quite what I'm after though.
I'm actually trying to answer the question "who stopped sharing that folder" rather than "who deleted that file".
Peter
.png)
