How do I trace users who delete or move files from server

We're in the process of setting up our XServe that will run on OS 10.6 and we would like to find out if it is possible to trace which user deleted which file or document from the server in case it happens. We want to do this because we will be having particular folders in which there are more than two users who have permission to remove files.
I tried searching answers in this forum but I'm probably not doing it the right way. So my apologies if it's already asked and answered, and thanks if someone can point me to such.

The answer relies on what access options the clients have to the directory in question.
If the users can ssh to the server and get a command line, you're out of luck.
If the users are using AFP, you can up the logging level on the AFP server to include file deletes.
The same goes for FTP and SMB, but there's nothing for NFS.
Other access methods may have similar options, too.

Similar Messages

How to find the user who deleted the contents of DSO.

Dear friends,
Can u please tell me ,how to find the user who deleted the contents of the DSO.
The user has deleted the complete contents of the DSO. We need to find the user ,date and time.
regards,
Vijai

Hi,
If the user has used the manage option to delete the contents of the DSO then the changed by field will be updated by the users name. In case a program is used for the deletion then it wont be the case.
Regards
Govind.

How to track the user who deleted the info object.

Dear Gurus,
In our BI system one info object has got deleted. If I need to track the user who has deleted that how can I track it(in which DBtable). And the complication is one user ID is being used by many people, in this case how can I track that from which machine the Info Object has been deleted(if there is any possibility to track the machines by IP address).
Kindly let me know if there is any procedure to find it out. Your help will be rewarded with a great honour.
Regards
Mohan Kumar

Hi dear,
you have to go in SLG1 transaction, and then select
Object: RSD
Subobject: IOBJ_DEL
External ID: (put here the name of your deleted IO)
Then choose a time range...and voilà, you can find the user who deleted the IO...
Hope it helps!
Bye,
Roberto
About the IP...look at USR41 table, but I think it's a bit difficult fo find data referred to the past...
If you haven't activated logon auditing in SM19...

Adobe acrobat 8 install affects all users who are opening PDF files

I am trying to understand how "Installing Adobe Acrobat on Citrix server" can affect users who are opening PDF files? Users who are trying to open PDF files are having problems opening it after I installed Adobe Acrobat 8.
I appreciate your advice.
Citrix Xenapp 4.5
WYSE clients accessing PDF files on our intranet
Installed Adobe Acrobat 8

I have not restarted the Citrix server. I installed it and executed the application and published it.
If restarting resolves it then it is good.
After I installed Adobe Acrobat 8 last night, this morning users who were accessing PDF files from our intranet are not able to access it I am trying to understand what kind of error that they are getting. So, far 2 users have complained that they are not able to open the PDF files.
One user's comment was this
I can't edit an application in Power Site Pro through Mortgagebot. Mortgagebot tech support told me it has to do with Adobe Flash Player.
Appreciate your reply.
thanks
Ifs

I use migrate assistant to move files from my old pc to the new Mac , but it creates the user account. How can i delete the unwanted user account.

i use migrate assistant to move files from my old pc to the new Mac , but it creates the user account. How can i delete the unwanted user account.

Welcome to Apple Support Communities
That's the classic behaviour after using Migration Assistant and that's normal.
To transfer the data from the new user account to your old user account, you can follow some steps. Here is all the information you need to do this > https://discussions.apple.com/docs/DOC-5472

How to identify the user who created the variant

Hi All,
Can anyone tell me how to identify the user who created the variant ?

Hi Dear,
For the same go to SE11 and view the table "VARID". This table give the details of the program,user,variant etc.
From this table u can know which user created the variant. Hope this solve your purpose.
Regards

How to find a user who created message in satelite system ?

hi all,
Does anybody know how to find a user who created message in satelite system, but when there is no business partner created for him in Solman ? In tx crm_dno_monitro, crmd_order or dnotifwl there isn`t any information. Is there any Tx or something where i can check it ?
Regards,
M.

Hi,
BP should ne maintained for the user in satellite system as a identification in solman system.
how you are trying to create a message in satellite system..
if you are using help-> create support message then, you can get the message log details on the table BCOS_PROT.
please update us
Thanks,
Jansi
Edited by: shivjansi on Jan 25, 2012 7:44 PM

How to find the users who r assigned to profile sap_all through su01

how to find the users who r assigned to profile sap_all through su01

you can get into SUIM-->where used lists, check for users with profile SAP_ALL you can get a list of users who have
it. and you can get into SUIM through SU01 from user information system link.
you can execute RSUSR002 from SA38/SE38.
RSUSR002 is the report which gets you the whereused list for profiles within roles, users.
you can get it from transaction SECR ofcourse you are executing the same report.
you can get from UST04 table and obviously USR04 also because sometimes you miss some details from UST04 because of sync problems.

How to see all users who are allowed permissions for the specified entity ?

How to see all users who are allowed permissions for the specified entity ?
And change user permissions for the current entity
from Moscow with money

Vincent,
... and how to change entity permissions for some users?
from Moscow with money

How to reset All users and delete their table?

Hi,
i want to know How to reset All users and delete their tables with username- system and password-manager.
thanks

Hi
Here delete means truncate or drop?????
If drop use the following statement to generate the script:
select 'drop table ' || Owner || '.' || Table_Name || ';' from Dba_tables
where owner in (<All_the_users_you_want_to_reset>);
But before firing the above statement extract the DDL's to create all the users and put it in a file and just run that file to re-create the users.
if its truncate then:
select 'truncate table ' || Owner || '.' || Table_Name || ';' from Dba_tables
where owner in (<All_the_users_you_want_to_reset>);
Hope this Helps
Regards

How to configure security so users can delete their own file(s)?

I have configured our file server so that all users can write/modify in any other user's folder. However, it seems that they cannot delete their own file(s) in another user's folder. Do I have to give all users the "Modify" but not Full permission
so that every user can delete their own file or folder even if it's in another user's folder? I still do not want user A to delete/modify any files/folders that user B originally created.
Any help is much appreciated.

Hi,
Based on my research, if a user can rename a file/folder, then he/she can save it using the original name, there is no way to prevent this via permission assignment.
You may need to use scripts to achieve this.
Best Regards,
Amy Wang

How can i set authrization to delete/change email address from broadcasting

How can i set authorization to delete/change email address from information broadcasting. I would like to set an authorization because other bi users also have an authority to change my auto mail settings. How can i restrict this?

Auth object for Broadcasting in 7.0 server
RSRD_ADMIN - Broadcasting (7.x) Administration
Check the authorizations for Broadcasting in the below SAP notes.
Authorization check for broadcasting settings
SAP Note Number: 1053944
Please go through this thread for additional info.
Authorizations for Broadcasting

How to delete all my files from my Mac?

Can anyone help me, how do I delete all my files from my Mac?

If you want to eventually sell or give away your Mac, follow the below steps to prepare it.
If your old Mac shipped with Lion or Mountain Lion, boot into Internet Recovery by holding down Cmd-opt-r on restart. When it boots, select Disk Utility and erase the Macintosh HD volume, then reinstall the OS. It will install the OS the Mac shipped with.
If it shipped with Snow Leopard, boot from the original install disk and select Disk Utility from the Utilities menu which you will see after selecting the Language. From there, select the Hard drive device (top of the list), and click on the Partition tab. Set it to 1-partition, give the new volume a name (Macintosh HD), and click Apply.
If you just want to get rid of the data off the Mac, create a new Admin user account, log into it, then delete your user account from the Users & Groups system Prefs. It will ask if you want to keep or delete the home folder.

How to delete the Generated files from application server(open hub)?

hi experts,
when i try to execute process chain the DTP it is giving below dump. Exception CX_RSBK_REQUEST_LOCKED logged.
when i execute the DTP manually and trying to delete the previous request, it is giving for dump ITAB_DUPLICATE_KEY.
so to delete the generated file from application server, how to delete it for specific dates?
Information on where terminated
Termination occurred in the ABAP program "GPD6S3OE0BCVGC6L9DBNVYQARZM" - in
"START_ROUTINE".
The main program was "RSBATCH_EXECUTE_PROZESS ".
In the source code you have the termination point in line 2874
of the (Include) program "GPD6S3OE0BCVGC6L9DBNVYQARZM".
The program "GPD6S3OE0BCVGC6L9DBNVYQARZM" was started as a background job.
and when i check the dump it is point out at below code
" Populate the lookup table for 0STOR_LOC
SELECT * from /BI0/TSTOR_LOC
into CORRESPONDING FIELDS OF table L_0STOR_LOC_TEXT
FOR ALL ENTRIES IN SOURCE_PACKAGE WHERE
STOR_LOC = SOURCE_PACKAGE-STOR_LOC.
but the programme is syntactically correct only.
how to rectify the issue.
regards
venuscm
Edited by: venugopal vadlamudi on Sep 28, 2010 1:59 PM

hi experts,
We have written start routine to get the storage location text and sending to File located at Application server through OPEN HUB.
here is the code written in the Transformations
In the global section
Text for 0STOR_LOC
    DATA: l_0stor_loc_text TYPE HASHED TABLE OF /bi0/tstor_loc
          WITH UNIQUE KEY stor_loc.
    DATA: l_0stor_loc_text_wa TYPE /bi0/tstor_loc.
and in the code to get the text
" Populate the lookup table for 0STOR_LOC
    *SELECT * from /BI0/TSTOR_LOC*
      into CORRESPONDING FIELDS OF table L_0STOR_LOC_TEXT
      FOR ALL ENTRIES IN SOURCE_PACKAGE WHERE
              STOR_LOC = SOURCE_PACKAGE-STOR_LOC.
im sure there is problem with the Routine only. i think i need to change the code if so please provide me the modified one.
thanks
venuscm
Edited by: venugopal vadlamudi on Sep 29, 2010 9:37 AM

HOW TO DELETE ADOBE READER FILE FROM ADOBE READER

HOW TO DELETE ADOBE READER FILE FROM ADOBE READER@ !@

Your question make no sense. What exactly are you trying to do?

How do I trace users who delete or move files from server

Similar Messages

Maybe you are looking for