I think it was Steve. If you want a way of gathering evidence though, you
should try asking in a group dedicated to the windows operating systems.
This is for .Net programming questions.
"Joe" <Jo*@discussions.microsoft.comwrote in message
news:24**********************************@microsof t.com...
Hi:
I'm using Windows Server 2003 SP2. Some user in the network (8 users) got
access to important data and erased it. How can I know who did it?
Thanks