Who has deleted data from Windows Server

Hi supporters, 
Somebody has deleted some files from windows server's physical drive from windows XP user machine. This allegation has been made by IT team to a very sincere employee of the company who is working from last 15 years with the firm. So, can you please help
me to know that how we can find the right & legal way to know who has deleted the data actually because there are personal clash between IT team and accused person (who is very much trustworthy).
Thus, please help me immediately and confirm me (on following mobile number) that if you could arrange an IT professional to sort out this issue as soon as possible.
Thank you,
With best regards, 
Mukesh Kapoor (09810030276)

This one may help.
Apply or Modify Auditing Policy Settings for a Local File or Folder
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Similar Messages

  • Delete data from archive server

    Hello,
    we have following question : How do you delete data from archive server which has passed the retention time and need to be removed from archive server.
    Have you any ideas?
    Thanks,
    Stefan

    Hi Planung,
    For deletion of data SARA transaction is used. Also deletion indicator is required to set for the documents which you are not using. Use the bapi BAPI_DOCUMENT_DELETE  for deleting the documents which are set with deletion indicator.
    I hope this will resolve the query.
    Regards,
    Ravindra

  • Who has deleted emails from shared mailbox ?

    Hi Guys,
    We have a shared mailbox and is accessed by more than 5 users.
    Some one did something and the emails got deleted. I see them in recoverable deleted items folder.
    Can anybody let me know how to find out who has deleted them ?
    FYI - we do not have auditing enabled on this mailbox prior to deletion.
    But using the MFCMAPI, I was able to figure out the last modification time (which is same for all the emails in this folder)
    So, I think, if we can find who accessed this mailbox during that particular time, I will be near to solution.
    Can you guys let me know how to check who accessed the shared mailbox at a particular time ?
    Thank you in advance.

    Hello,
    If you did not enable the mailbox auditing logging for the mailbox, I am afraid there is no event to record the operations.
    Mailbox audit logging
    https://technet.microsoft.com/en-us/library/ff459237(v=exchg.150).aspx
    Thanks,
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Simon Wu
    TechNet Community Support

  • How to delete file from Window server

    Hi
    Can anybody tell me that Is there any function module for deleting file from presentation server like C directory.
    Quick suggestion will highly be appreciated!!!!!!!

    Try this:
    CALL METHOD cl_gui_frontend_services=>file_delete
      EXPORTING
        filename             =
      changing
        rc                   =
    EXCEPTIONS
       FILE_DELETE_FAILED   = 1
       CNTL_ERROR           = 2
       ERROR_NO_GUI         = 3
       FILE_NOT_FOUND       = 4
       ACCESS_DENIED        = 5
       UNKNOWN_ERROR        = 6
       NOT_SUPPORTED_BY_GUI = 7
       WRONG_PARAMETER      = 8
       others               = 9
    this is pretty gud approach .
    Message was edited by:
            Nishant Rustagi

  • Delete data from application server

    Hi All.
    I have created file in application by using OPEN DATA SET, I need to delete from application server after some validation ,  how to delete?
    Please guide me.
    Thanks in Advance.

    Hi,
    DATA FNAME(60) VALUE 'file'.
    OPEN DATASET FNAME FOR OUTPUT.
    OPEN DATASET FNAME FOR INPUT.
    IF SY-SUBRC = 0.
      WRITE / 'File found'.
    ELSE.
      WRITE / 'File not found'.
    ENDIF.
    DELETE DATASET FNAME.
    OPEN DATASET FNAME FOR INPUT.
    IF SY-SUBRC = 0.
      WRITE / 'File found'.
    ELSE.
      WRITE / 'File not found'.
    ENDIF.
    The output appears as follows:
    File found
    File not found
    Use cane Also Use Function Modue: EPS_DELETE_FILE
    Regards,
    Gurpreet

  • Delete file data from Application Server

    Hello,
    How do we delete data from the file on application Server.
    For deleting the file, we use DELETE DATASET <filename>.
    If we want to delete only the data and not the file, how to address it?
    Please let me know.

    Hi , please check the following links, maybe using the truncate dataset can be helpful.
    http://help.sap.com/saphelp_nw70/helpdata/EN/fc/eb3c7f358411d1829f0000e829fbfe/frameset.htm
    http://help.sap.com/saphelp_nw70/helpdata/EN/d5/c3f58e9f3b11d2960000a0c9308b1f/frameset.htm
    Another way could be get the file name and store in a var , then delete the file and afterwards
    create a new one with the same name as stored in the var.
    Thanks,
    Walter Oliveira.

  • System log - how to find out who has deleted the req from cube.

    ^hello friends
    how can i find out who has deleted the request from cube ?
    i wanted to check the system log , that who has deleted the request from cube .
    could you please let me know how to check the same ?
    regards
    manoj

    Hi,
    Did you try the method I had suggested. It will work.
    Also its better to try the path I had suggested as it will display the logs for that particular Cube only.
    But if go through SM37 > B_DEL* it will display all the logs for all the deletion jobs not just this cube and it will be difficult to find out.
    Try that and you should get the log.
    Thanks,
    JituK

  • Best way to push change data from sql server to windows/web application

    i apologized that i do not know should i ask this question in this forum or not.
    i have win apps which will load all data initially from db and display through grid but from the next time when any data will change in db or any data will be inserted newly in db then only change or newly inserted data need to be pushed from db side to
    my win apps. now only sql dependency class is coming to my mind but there is a problem regarding sql dependency class that it notify client but do not say which data is updated or inserted.
    so i am looking for best guidance and easy way to achieve my task. what will be the best way to push data from sql server to win or web client.
    there is two issue
    1) how to determine data change or data insert. i guess that can be handle by trigger
    2) next tough part is how very easily push those data from sql server end to win apps end.
    so looking for expert guide. thanks

    Hello,
    Yes, you can create DML trigger on INSERT and UPDATE to get the changed data into a temp table. And then query the temp table from application.
    If you are use SQL Server 2008 or later version, you can also try to use
    Change data capture, which
    can track insert, update, and delete activity that is applied to a SQL Server table and store the changed values on the Change Table.
    Regards,
    Fanny Liu
    Fanny Liu
    TechNet Community Support

  • Who deleted data from IC

    Hi,
    is there any way to know who deleted data from a IC, ODS ?
    I looked for a job "BI_DEL*" on SM37 but data was deleted with right click -> complete delete so it seems not to record any entry.
    thx in advance

    Hi juan
    You need to go T-code SLG1
    give this in selection condition
    External ID: MON:PROTOCOLL_ACTION
    T-code : RSA1
    Provide  date if you can give because there are hell lot of data so be specific in giving the date
    you will find some records for deleted request from data target..now search for your target...the user is given in statring of each record
    Thanks
    Tripple k

  • How to find who has deleted the query in Production system

    I Experts,
    I have an issue. Someone has deleted one query in Production system.
    How can i find who has deleted the query??
    I searched the ans for the same i the below threads :-
    Query deleted in production
    How to find out who has deleted the production Query
    But it didn't help me as i couldn't understand how to use the transaction SLG1.. Can Someone please explain me how can i find out who has deleted the Query..
    Regards,
    Pavan Raj

    Hello,
    Please, remember the date on which date the query has seen last time  in the production server. You can use the last date in the From date and To date would be current  date and execute the SLG1 tcode. It would list you all the logs in the Object text you can search for BEX Query designer and sub object text column you can check for delete logs options.
    Double click on the object will list you the query and name. From the user column you can find who has deleted the query.
    Might be this can help you for analysis.
    Thanks
    Geeta Sharma

  • How can I find out user id who has deleted payment order

    Issue : After payment run, the required information has been sent as Idoc to the bank. So, we know the payment order number.   We observed that another payment run also has picked up this vendor invoice and made payment.
    Usually Payment Sent will be marked X until the related information comes in the form of bank statement upload and this amount gets cleared.
    We noticed that bank has made two payments for this amount to this vendor on different dates :- a) when the payment order supposed to be paid as per the payment terms and b) when second paymnet run paid the amount [ this time it got paid directly as there is long due amount ].
    From SAP APP angle, both the payment run worked fine and also the calcaltion of payment terms as well.
    So, we come to conculsion that someone has deleted the payment order from the system. Thats the reason this invoice got picked up by 2nd APP and paid the amount.
    Where we could not find the related entry in REGUH/REGUP tables for this payment order and no document changes.
    Question: How can I find out user id who has deleted payment order. Appreciate any clue / answer for this issue please.
    Thank you
    Sri

    Hello,
    Not sure about deletion logs. =/
    Idea:
    What if an error occured during the first payment? Have you checked sm13 to check if any update termination occured in the payment program?
    Regards,
    Renan

  • Trace  to find who out who has deleted / modified  the attendance record

    Dear All
    Some one has deleted the attendence record of a particular user of previous month , so how i can track who has deleted / modified the same in salary slip it is showing 1 leave record for the same month, but while checking throught pa30 there is no record shown for the same . can you please tell me how to trace that and which tables are updated once we update the attendence and while processing the salary slip , from which table it picks the leave availaed data .
    Thx
    Shilpa
    Edited by: Shilpa on Nov 13, 2009 11:31 AM

    Hi Shilpa,
    You have to activate the audit Trail.
    RPUAUD00 isthe program to see the changes in infotypes records, but before that you have to configure T585A, T585B, T585C
    Regards,
    Kapil Kaushal

  • How to trace deleted program.....who has deleted

    Hi all,
    I was using one program ( se38). anyone has deleted that program from development server,
    i want to see the details who has deleted and when.is it possible to find out these details.
    Thanks in advance.
    Sujeet

    Hi Sujeeth,
    Goto table E071 with OBJ_NAME EQ programm name
    Search record with OBJFUNC EQ 'D'
    Goto E070 with TRKORR EQ E071-TRKORR
    Look at E070-AS4USER (user name, who deleted programm)
    you can see a log in this table also.
    D010SINF
    Thanks & regards,
    Dileep .C

  • How to track , who has deleted table entry

    Hi Experts,
    Is there any way so that i can know that who has manually deleted few entries(data records) from my table,actually my table has "Display maintenance allowed" property set.
    Can we track it anyway that when and who has deleted that table record.
    Regards,
    Abhishek

    Hi Abhishek,
    Actually the changes made for an entry into table will have two effects.
    Changes at the data element level and another at the entire db table level all these changes will have an entry only if the change documentation is activated.
    Table logging concept wherein SAP records all insertions, deletions, and changes in tables
    OSS note 139418 will gibe you general information on logging user actions.
    http://help.sap.com/saphelp_nw04/helpdata/en/cf/21eaf9446011d189700000e8322d00/content.htm
    http://help.sap.com/saphelp_nw04/Helpdata/EN/7e/c81ebb52c511d182c50000e829fbfe/content.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/a0/7d1020dac8994fa63ff270dbceb87f/content.htm
    revert for further clarification,
    Thanks and Regards
    Srikanth.P

  • Error while exporting data from sql server to excel

    Hi,
    I am trying to export data from sql server to excel.
    The query that I used is s follows
    INSERT INTO OPENROWSET( 'Microsoft.Jet.OLEDB.4.0', 'Excel 8.0;Database=C:\Folder1\abc.xls','select * from [Sheet1$A1:IV65000]')
    select 
    column1,column2.... from Table1
    I get the following error message while doing so..
    String or binary data would be truncated.
    The statement has been terminated.
    One of the column's holds data more than 225 characters.
    What is the way to correct this, i want the whole data of the colum in the excel sheet.

    I haven't had great luck with the INSERT INTO OPENROWSET method.  Can you try one of the many samples from one of these 3 links?
    http://www.excel-sql-server.com/excel-sql-server-import-export-using-vba.htm#Excel%20Data%20Export%20to%20SQL%20Server%20Test%20Code 
    http://www.mssqltips.com/sqlservertip/1540/insert-update-or-delete-data-in-sql-server-from-excel/
    https://www.simple-talk.com/sql/database-administration/getting-data-between-excel-and-sql-server-using-odbc--/
    Knowledge is the only thing that I can give you, and still retain, and we are both better off for it.

Maybe you are looking for