SOLVED: VIDEO: Delete Auditing: How to Determine Who Deleted a File On Windows Server

Most companies want to keep track of who is deleting files on their servers and while the process is not difficult, it is far from obvious.

We demonstrate how to setup file and folder auditing as well as the creation of the Group Policy Object and then finish showing that the Event Viewer Windows Security Log showed EVENT ID 4656 when a file deletion occurs.

 


 

Published by
Ian Matthews

This website uses cookies.