Now without a means to find the file, or sometimes just the inability to find it, we’re headed for the backups. You have to have file auditing and part of it is simply giving better customer service. From here, short of a confession, I wasn’t going to get a conviction. And just knowing how people make mistakes can make your search easier.īut sadly there wasn’t a tool in place to answer the question of who moved it, much less where the file went. That little tip can help you a lot because people do things by accident. People get mouse happy and drag it over, often times without realizing it. Select where you think it might be and usually, you’re going to find it in an adjacent directory.

If you don’t have that, at least type in the extension and get as close as you can to what it was called, and use wildcards for the parts you don’t know. What you’re looking for is the name of the file. The way most folks would do it is simple: just open your server, and start a search. But it was time consuming: a search through 2.5 TBs of disk took about 12 hours. I eventually found the file, and of course it had simply been moved. All together now, and you have to say with a piercing wail: “I DIDN’T DO IT!” Does that sound familiar?įinding the file was simple I just set up a search for it.

If I got all the users together, and used my well-honed criminal investigation tools, every user would say the same thing my children said when they broke something. I can imagine the interrogation on that one. I had a ticket cross my desk today that essentially boiled down to “Where did this file go, and who moved/deleted it”. Now, before I start getting hate mail, before folks start driving by my house and shooting at it (warning, I shoot back) or before I start getting the stink eye, let me defend what I just said. But first, how many of you are aware that users have a lot in common with a five year old? Today we are going to talk about finding “lost” files with File Server auditing.

Netwrix auditor full crack