i have shared folder on the server and so many users using this folder ,i checked some files on this folder i found it was missing ,so how i can know who is deledted this files,and how i can retriev it?
2006-11-06 16:49:26 · 3 answers · asked by silver shadow 1 in Computers & Internet ➔ Other - Computers
Go thru the server logs..
2006-11-06 16:50:49 · answer #1 · answered by Vaibhav 4 · 0⤊ 0⤋
File recovery is usually a time-consuming process, and often is not completely successful. Once a file is deleted, the space it occupied on the hard drive is marked as “available” and can be overwritten. DO NOT install any file recovery software on the drive that houses the file you want to recover.
The more time that passes between the deletion of the file and the initiation of the recovery process, the less likely the process will succeed.
If your server is running a gnu/inux os :
you can refer to the following to partially recover your data.
http://www.samag.com/documents/s=7033/sam0204g/sam0204g.htm
To know who deleted the files is tricky. If you can predict the date/time when the files might have been deleted , you can use the "last" command to know who were logged in to the server at that time. You can then narrow your search for the person who deleted the files.
2006-11-07 04:46:06 · answer #2 · answered by Y Raghavendra Reddy 2 · 1⤊ 0⤋
Your server should have a IP track log on there. Thats what you need really and go from there.
2006-11-07 00:51:30 · answer #3 · answered by Anonymous · 0⤊ 0⤋