locked
how find whose user or ip address deleted folder in wsus server RRS feed

  • Question

  • in our environment one folder (computer group created in wsus) deleted in wsus server but i want to find whose one are deleted this so please help how ip address or user id find. 
    • Edited by ravya Thursday, May 2, 2019 2:48 PM
    Thursday, May 2, 2019 2:45 PM

All replies

  • Hi Ravya,
      

    Thank you for posting here.
    If you need to view the deletion records of the computer groups in WSUS, it is recommended that you check the change.log (usually located at C:\Program Files\Update Services\LogFiles), which records the deletion records of the computer groups in the console, as shown in the following figure:
     

      

    If you need to confirm the deletion of shared files in the server, please refer to the following thread: "how can track who deleted file/folder from Windows Server 2008". Or go to the File Services and Storage forum for more professional advice.
      

    Hope the above can help you.
     

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, May 3, 2019 2:13 AM
  • Hello Yic,

    Thanks a lot.

    Friday, May 3, 2019 8:14 AM
  • You are welcome!
      

    If this does not resolve your issue, please continue to provide information.
    If the issue is resolved, mark the useful response as an answer to help other users find the answer faster.
      

    Thank you for your cooperation.
      

    Regards,
    Yic


    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, May 6, 2019 5:44 AM