Question: Hi all
I have a Win 2003 server which is a DC and a file share on it.
The file share has been selected for audit object access for success on every attribute on the parent folder with the audit being applied to all folder and files within the share.
The problem is users are reporting files or folders going missing, I assumed somebody must be by accident dragging and drop the file or folder somewhere else or copying it to somewehere else.
I tested the audit out by cut and paste the folder and it came up with something like synchronising deletion for the old file location. But there is no log for where the folder was pasted to.
I tested drag and drop and the log came up with something like synchronising which I think means copied into new location but the old location folder stayed there also.
Because the audits have been set to full control the logs are full within a day and this is not a reliable method to audit files going missing.
Does anyone have any other suggestions to track these files or folder going missing please?