Comments on: File deletion on the network

By: petkoa

petkoa — Wed, 22 Jul 2009 14:57:13 +0000

Hi,

as Labnuke99 wrote, you didn’t provide any information about your OS’es… And, as Kevin said, “Once something is deleted off a network drive it’s pretty much gone”. If, however, your file server is samba on Linux, you have an option to have a recycle bin on a network drive through samba vfs object. Configuration details could be looked up in:

man vfs_recycle

BR,

Petko A.

By: kevinbeaver

kevinbeaver — Wed, 22 Jul 2009 13:51:59 +0000

Once something is deleted off a network drive it's pretty much gone unless you have a backup. It sounds like you need something sitting on the client or server that can monitor this stuff in real time. Likely a data leak prevention product that's proactive. Or, Fake Delete may do the trick. On the more reactive side (in case you want to see who did what), check out the following: watchDirectory MonitorWare PA File Sight Also, make sure you're giving your users the proper network file permissions...that can be the best way to prevent this occurring.

By: technochic

technochic — Tue, 21 Jul 2009 21:12:02 +0000

I do hope you are at least doing nightly backups!

By: technochic

technochic — Tue, 21 Jul 2009 21:11:37 +0000

Shadow copy will definitely help, or else you will be faced with doing endless restores. Bleccch