Holding your users accountable for their actions is one of the trickiest things about being an IT Consultant. If a user tells you he didn’t delete or move a file you can’t just sneer at him and accuse him of lying, no matter how much you want to. You must have proof. A nice solid document showing the who, when, and where of the users malfeasance. Enter file system auditing.

Read the rest of this entry »