StableBit DrivePool Q7965944 - Revision history

Alex: /* When to Use */

2013-04-03T19:09:11Z

When to Use

2013-04-03T19:07:21Z

When to Use

2013-04-03T19:06:13Z

How to consult the event log

2013-04-03T19:05:23Z

Steps

2013-04-03T19:04:59Z

Steps

2013-04-03T19:04:21Z

Steps

2013-04-03T19:03:26Z

Steps

2013-04-02T23:17:22Z

Steps

2013-04-02T23:16:30Z

When to Use

2013-04-02T23:15:37Z

When to Use

@@ Line 7: / Line 7: @@
 * Make sure that the NTFS file system is not damaged on each disk that is part of the pool. You can do this from Windows Explorer, '''Right click on the disk''' -> '''Properties''' -> '''Tools''' -> '''Check now....'''
 * Someone or some application has deleted those files. This is the point that we're going to address in this article.
 In order to record every file deletion, and who or what was responsible, we can use the built-in auditing capabilities in Windows.

@@ Line 1: / Line 1: @@
 ==When to Use==
-If one or more files that should be on the pool have vanished, and you don't know why.
+Use the information in this article if one or more files that should be on the pool have vanished, and you don't know why.
 Files can disappear from the pool for a number of reasons:

@@ Line 34: / Line 34: @@
 # Under where it says '''<All Event IDs>''' type in '''4663''' (Event ID 4663 is a file deletion).
-Now you will see a list of all recent file deletions, when the deletion took place, which user (or application) initiated the deletion.
+Now you will see a list of all recent file deletions, when the deletion took place, and which user (or application) initiated that deletion.
 ====Increasing log file size====

@@ Line 25: / Line 25: @@
 # Click '''Continue''' if you see an '''Access is denied''' warning for the '''System Volume Information''' folder. This is normal. You can't audit that folder because you don't have access to it.
-Now your Windows machine is recording every single delete that you or some application does on the pool. If you even need to find out why a file is missing, just consult the event log.
+Now your Windows machine is recording every single delete that you or some application does on the pool. If you ever need to find out why a file is missing, just consult the event log.
 ===How to consult the event log===

@@ Line 23: / Line 23: @@
 # In the dialog that pops up, check the '''Successful''' check box for '''Delete''' and '''Delete subfolders and files'''.
 # Click '''OK''' through on all the dialogs that are open to apply your settings. (this may take a while if you have a lot of files on the pool)
-# Click '''Continue''' if you see an '''Access is denied''' warning for the '''System Volume Information''' folder. This is normal.
+# Click '''Continue''' if you see an '''Access is denied''' warning for the '''System Volume Information''' folder. This is normal. You can't audit that folder because you don't have access to it.
 Now your Windows machine is recording every single delete that you or some application does on the pool. If you even need to find out why a file is missing, just consult the event log.

@@ Line 15: / Line 15: @@
 # Navigate to '''Local Policies''' -> '''Audit Policy'''.
 # Double click on '''Audit object access'''.
-# Check '''Success''' and click ok.
+# Check '''Success''' and click '''OK'''.
-# Now open up '''Windows Explorer'''.
+# Now open up '''Windows Explorer''' to the view that lists all of your hard drives.
 # Right click on any pool drive letter that you want to audit and click '''Properties''',
 # Open the '''Security''' tab and click '''Advanced'''.

@@ Line 8: / Line 8: @@
 * Someone or some application has deleted those files. This is the point that we're going to address in this article.
-In order to record every file deletion, and or who what was responsible, we can use the built-in auditing capabilities in Windows.
+In order to record every file deletion, and who or what was responsible, we can use the built-in auditing capabilities in Windows.
 ==Steps==

@@ Line 5: / Line 5: @@
 * Make sure that you have no missing disks, and that all the disks part of the pool are accessible and responsive.
-* Make sure that the NTFS file system is not damaged on each disk that is part of the pool. You can do this by '''Right clicking on the disk''' -> '''Properties''' -> '''Tools''' -> '''Check now....'''
+* Make sure that the NTFS file system is not damaged on each disk that is part of the pool. You can do this from Windows Explorer, '''Right click on the disk''' -> '''Properties''' -> '''Tools''' -> '''Check now....'''
 * Someone or some application has deleted those files. This is the point that we're going to address in this article.