L
LoAlbert
Our office is using Windows Server 2016 Standard for data sharing purpose to 17 staffs in office. Each staff is able to connect to Windows Server for retrieving and storing files / data.
We received a complaint from one of our staff that some files / data which she stored in folder on data server were deleted. Actually those files were saved in data server on 10 November at around 6:00 pm. When the staff returned to office on 11 Nov, at around 09:15 am and found that all files were deleted. This is a very serious incident !
I am going to investigate this incident and would like to know if Windows Server recorded this event in the logs so that I can find out whose to delete these files form Windows server. How can I retrieve this logs from Windows Server or staffs workstation ? Please advise. Thank you.
Continue reading...
We received a complaint from one of our staff that some files / data which she stored in folder on data server were deleted. Actually those files were saved in data server on 10 November at around 6:00 pm. When the staff returned to office on 11 Nov, at around 09:15 am and found that all files were deleted. This is a very serious incident !
I am going to investigate this incident and would like to know if Windows Server recorded this event in the logs so that I can find out whose to delete these files form Windows server. How can I retrieve this logs from Windows Server or staffs workstation ? Please advise. Thank you.
Continue reading...