W2003 Server deleted files?

Question

Is there an easy way of finding out who deleted a lot of user data files from a Windows 2003 server?

Answer 1

u can enable gpo for auditing the objects with success. and u may see in event log in the admin tools to view the successed access from client.
from there can isolate which person is done that process.

try it
find them