It appears as though someone in our IT department has recently made changes to some of our security settings on a few network folders. Is there a log or something I can look at to see which user made the changes? Please note that all of our IT staff has the ability to modify the user rights on folders. I just need to know how to tell which staff member made the changes.

Any help would be appreciated.

Check in: Administrative Tools >> Event Viewer >> Security

Thanks for the response. The trouble is, the log doesn't go back far enough. Is there anything else I can do?

hot poker that usually gets you all the info you need. ;-)

or bluff
if you have a large or resonably large department make some noise about the properties getting changed and you know who it is but say that you are keeping quiet so that the person wont get in trouble also. when you talk about it make sure there is at least two people or more there. cos if it is the person you are talking to then they will know your bluffing. or if you can get some one who is above you to come in and say that you have found out. say that either the logs have been recorded and that another program hass allowed you to see who it was but be vauge about it. Then send a group email saying that this has occured you have found out who the perpitrator was and that this email is to inform the namless party to change it back since this is a serious matter and that the email is put to warn the rest of them that any more deviations of this rule will have dire consiquences. then sit and wait to see who changes the properties or who is acting very nervious. might not work and when you catch them you will only be able to give them a stern talking but at the moment there is no way of finding out and if you catch them you will be able to keep an eye on them in future.

or having thought about it look at the system back ups if you do such things. hopefully the event logs have been backed up too

all text needs typos. There there for the reader to find,to distract them from the total lack of content.
google it! wasnt the answer to the question i asked so dont be dense and give me that repl