File moved date time

Hi all,

One folder has been moved from one location to another location from the file server by an unidentified user.

Is there away to check by whom and when this has happened

I believe this is what you're looking for:

1. Select the folder in question (webroot or whatnot), and select "properties"
2. Select the "security" tab.
3. click the "Advanced" button.
4. Select the "Auditing" tab.
5. Add his user to the list.
6. Select the options that are appropriate (like "create files/ Write data" "Delete" and so on).

Monitor the event viewer security logs, and see what happens.

Keep in mind that if he's a fellow administrator, he can disable these properties, and also look through the security log.

Many of the examples changes by using a set of columns and triggers that are added to base tables, and additional tables to track deletes. The examples use this kind of change tracking so that they are not limited to a specific database. However, be aware that custom change tracking introduces complexity and can affect server database performance. For more information, see How to: Use a Custom Change Tracking System. If you are using SQL Server 2008, we recommend that you use the SQL Server change tracking feature. For more information, see How to: Use SQL Server Change Tracking.