Thread: Is it possible to know which user deleted the Shared Folder?

Hi, I have Windows Server 2003 R2 Enterprise edition. There are totally 20 users who use the system. I have one Shared folder. Someone has deleted that folder. Don’t know, who has deleted? I want to know who has deleted that folder. I am not using any security logs. Is it possible to know? How?

No. If you are not monitoring the server using security logs means it is not possible to find out. In future, if you want to find out then go to shared folder properties and then click on Security tab and then click on Advanced button and then click on Auditing tab. There you can add the usernames for whom you want to track and then on delete actions.

Also see the below site, which may help you in future.

EventSentry - Real-Time Event Log Monitoring Consolidation Suite