Just wanted to gather system administrators so we can share our thoughts and skills or even discuss on issue's we face everyday

Any one here work as a system admin professionally?


I have a small little question, i have this file server whereby its dedicated for a certain project. The thing is im having issue's about someone deleting certain folders used by senior management and these people are within the group. So i cant block these groups from accessing the folders.

I would like to know is there a 3rd party application that would show logs on who deletes content of a folder? Backup and restore can be done but i want to catch who is the culprit thats behind that.

Is there a way or tip that you could share??

Thanks a bunch

Actually, i had the same problem. Some looser deleted of excel files that contained some accounting information. We sorta figured out who did it but without any proof.

Anyway, I saw u'r post and decided to google it. Came out with this :

http://www.2ka.org/?q=node/33

U wanna give it a try and report your findings back to us?
I'm gonna give it a whirl when i get back to office on Monday.

thats great.
Will give it a try on Monday.
Will install it in a testing env before moving to the production server.

I've goggled too. Tested 1 in testing env but screwed up few services. Cant remember what was the name tho. It slowed down file access considerably. Hope this works fine.

If you're running NTFS, you can just turn on auditing on the folder (Security/Advanced/Auditing).

That shuold enable you to see who's deleting the files. It's logged into the security event log.

or perhaps cvs/svn?
but then very mafan.
i guess the default windows security as mention above much better.

Second that. The security log will show who delete what file at what time. That's the best evidence. Then send a personal email to the culprit with the screenshot attached, says "dont ever mess with your system administrator".

How about in unix enviroment? Same issue....

any other issue' u guys want to share?

seems interesting.

does anyone know how to update the dhcp address pool automatically so it drops ip address's thats not being used ? im having problem coz the ip address's are stuck and not released when a machine shuts down...one project has roughly 260 machines and 1 dhcp server

apart from increasing the pool, any other efficient way?

i would like to know the above answer too