Windows 10: some files in Windows Server were deleted and wanted to start investigation_any logs could...

Our office is using Windows Server 2016 Standard for data sharing purpose to 17 staffs in office. Each staff is able to connect to Windows Server for retrieving and storing files / data.

We received a complaint from one of our staff that some files / data which she stored in folder on data server were deleted. Actually those files were saved in data server on 10 November at around 6:00 pm. When the staff returned to office on 11 Nov, at around 09:15 am and found that all files were deleted. This is a very serious incident !



I am going to investigate this incident and would like to know if Windows Server recorded this event in the logs so that I can find out whose to delete these files form Windows server. How can I retrieve this logs from Windows Server or staffs workstation ? Please advise. Thank you.

:)

 

Only write one number to log file and delete old ones?

Hey,

I'm trying to have some software read from a .text file a number (GPU Temp) but the software will only the first number in a list (Or the first anything)

Is there a way to have to log file delete the previous entries and write the new number in it's place without any headers?


EDIT:

Sorry I'll try again.

I have some webcam software that can read a number (or whatever) from a text file and then it displays the number as an overlay.

See here: http://10.244.193.13:8081/

I was trying to use GPU-z to do this but as it logs as a list the webcam software can't update properly (also it reads the headings of the file and displays them instead)

Is there anyway to alter the logging to only output just the number (GPU Temp) and to delete the old numbers so the new value is the only value in the file.

 

I Think CCleaner Deleted My AsusSetup Log File

Is your system misbehaving or programs crashing/not starting, then no... don't worry about a log file.

However, you keep calling it an inii file... do you mean it is an .ini file; if so, run the program the file is for, open the options menu, set the options, save the options... it will probably re-wite the .ini file.

If, it won't start, then try a repair on the program or re-install the program affected.

CCleaner deleted it,because it is set to delete log files, temp files, etc. as default.
It is a program, you must set its options and tell it what to do and not to do.

Quote from Recuva's documentation page:
Spoiler

And, same info here: Recuva File Recovery

 

Saves log files ?

You can either read the files in Windows or my preferred method is.....

Download CCcleaner from here...........

CCleaner Professional | Try the world’s most trusted PC cleaner, free!

You can then run cleaner, you will see the log files listed, then if you right click you can save as a text file and then have a read. You may also get an "error reporting" log listed seperatly.