Tracking User Movements On A Network

[oHUTCHYo]

I need to be careful what I say, but suffice to say we have redudancies within our company. Now, pure coincidence or foul-play, a few GB of specific folders have been deleted from a shared network drive which contain costings and sales data.

I fear foul play is at hand, maybe not in the sense of deleting on purpose, but maybe a user trying to copy the files to take with them, but moving them by mistake.

The files are safely backed up, so no harm done. However, is it possible to identify which particular user is guilty?

Most users are on WinXP / Win7.

 

[oHUTCHYo]

haha, I'm the Sales Manager working with the IT department to resolve it. An IT department who dont think its possible to trace. I dont agree, there must be a way surely.

We dont have any 3rd party software running as far as I know.

 

[oHUTCHYo]

In response to me being a know it all, I studied A+, N+ and MCSA so I like to think I have a rough idea, as well as the personal interest I have in computing.

Reference file auditing - deletion rights of all users barring managers were revoked, hence the suspicion of files being moved.

Not sure whats with the elitism or crticism in this post mind you - seems very aggressive considering a very simple and honest question.