Auditing the deletion of files

G

Garry

Guest
Hi, I am trying to audit when a user deletes a file on a Windows 2003 server.

I have setup the auditing so that it records the Successful and Failed

attempts of 'Delete Subfolder and Files' and 'Delete'. According to the Event

log it now records the deletion of files but also the deletion of the

contents of the file e.g. delete the contents of an Excel spreadsheet cell.

This is too much detail and I only want the deletion of files or directories

recorded. When I select 'Delete Subfolder and Files' only, it doesn't record

any deletions. Is there a solution to this or alternative software that can

be used.

Any help much appreciated.

Garry

 
Top Bottom