4

A new share has been created on a server I use and we need to find out who created it and when. Is there a way to find that out? It's Windows Server 2003 SP2.

Mark Allison
  • 2,188
  • 7
  • 26
  • 45
  • 1
    view the details of the directory listing in explorer and modify the view to include the owner, there is no creator attribute, maybe you can get more information if there are any files in the share – Sum1sAdmin Apr 27 '16 at 13:21

2 Answers2

2

the only way to get who and when the share was created is if you have enabled auditing policy for local file or folder on the server.

if the auditing was enabled you can see the information you are searching for in the Event Viewer under security logs.

good luck

nelasx
  • 161
  • 1
  • 9
1

If you don't have auditing enabled your best bet is the owner of that folder. By default the creator of a folder is also the owner. It is not 100% reliable because ownership can be taken away.

  • Right-click the folder - click Properties.
  • Security tab
  • Click Advanced, and then click the Owner tab.
duenni
  • 2,959
  • 1
  • 23
  • 38
  • This answer is worth my job Reputation! One of my client created a extra folder and moved all other files there which was causing problems in my application. Initially they accused me for this but then I found who created the folder :D – Shahriar Rahman Zahin Sep 09 '20 at 12:06