(Wombel) USB File Server Deletion

(nothing to do with viruses/crypto)

An important precursor to this is that Wombel was responsible for the backups. We used tape backups at the time: go into server room, shove in tape, check next day on the console it was ok, weekly restore test. There was gaps of over a month at times.

They kept “Forgetting”

And, we regularly went to \\server\F$ to access things from the servers.

I’m not sure if I had just had a couple of days off for a reason, or if I Had been ill or whatever, but I Came into the backlash of this.
I had in my head this was the DC, but as I type it out if may have been our media server and I had been trying to migrate it and had an out of date copy there.

Anyhoot, Bossman had called me up and asked “do I have a copy of X as something isn’t working”, I didn’t and then I asked what had happened. Wombel had deleted it all.
After much digging, it turns out that Wombel had a memory stick in the computer and needed to delete it all, but they also had the server share in the quick access in windows. So they selected the quick access for the server, and started to delete that, and I don’t think they noticed soon enough. I Know we lost quite a bit of low importance files.

Apart from backups being checked by Managers, all of the polices that would have prevented this
A) Wouldn’t really work in a school that size
B) Would haven’t been effective as Wombel would have been logged in as Admin.