Novell Netware has a utility called "Salvage" that can be run that
lets an administrator see recently deleted files on a server drive. 
It will also tell them WHO deleted the file (i.e: the client/user),
WHEN the file was deleted, and also allows the administrator to
UNDELETE it.  For the past several years, I've just assumed Windows
Server 2000/2003 did not have anything like this, but now I'm
determined to find something once and for all that can do this for me
on Server 2000/2003.  I have a few utilites that let me recover
deleted files, but they do not show me who deleted them.  (Finding out
who deleted the file(s) is oh so much fun!)

I am looking for a utility (either built in or 3rd party) that will
allow me to see 1) Who deleted a file (i.e:  What client
computer/user) 2) Recover this file.

Thanks in advance!

pascal1...

I'm pleased to report that Executive Software, the company
who created the Defrag utility used by Windows (and the
authors of the Diskeeper program which far exceeds the 
functionality of the Windows version), has also created
a program which far exceeds the functions available from
the Windows Recycle Bin:
http://www.undelete.com/undelete/undelete.asp

And, yes, the latest edition provides an interface much like
Windows Explorer which indicates which computer, drive and
folder the file was deleted from, as well as who deleted it
and who owned it. It also tells you the date/time last 
modified and the date/time deleted.

This is evidenced by the images available in the PDF user's
manual, which is found on this page:
http://support.undelete.com/support/manuals.aspx

The top link is for Version 5, the latest version.

Here's a direct link to the PDF file:
http://files.diskeeper.com/pdf/Undelete5_Manual.pdf


A free trial download for the Home version is available
on this page:
http://www.undelete.com/downloads/downloads-r.asp

If you download as a home user, you may be able to use
a copy of the software which will operate beyond the
trial period with limited functioning. This is the case
with their trial Diskeeper Lite software, which will
defrag one drive at a time, and lacks the scheduling
function of the full version. I use and recommend it.
It's available for download from MajorGeeks.com:
http://www.majorgeeks.com/download.php?det=1207

If you decide to purchase Undelete 5, the price for a
home user is $29.95, and the professional edition is
$39.95. There's also a bundle deal of Diskeeper9 and
Undelete5 Home editions for only $39.95:
http://consumer.undelete.com/purchase/purchase_undelete.asp


Unfortunately, the Home and Professional editions aren't
designed for Windows Server 2003. For that you need, at
least, the Small Business version of Undelete Server:
http://smallbiz.undelete.com/undelete/server.asp
 
A trial version is available from this page:
http://smallbiz.undelete.com/downloads/undeletedownloads.asp

If you decide to buy, the purchase price will depend on your
network configuration, and can be calculated here:
http://smallbiz.executive.com/purchase/undelete.asp


If your business has 100+ employees, you'll need to contact
a reseller for assistance with purchase and configuration:
http://www.diskeeper.com/resellers/resellers.asp


The searches I made didn't turn up any alternatives for 
this program, for 2003 Server, but even if they did, I
would recommend Executive for their longstanding name
and reputation. If there's anything that's not clear,
just let me know.

Please do not rate this answer until you are satisfied that  
the answer cannot be improved upon by way of a dialog  
established through the "Request for Clarification" process. 
 
A user's guide on this topic is on skermit-ga's site, here: 
http://www.christopherwu.net/google_answers/answer_guide.html#how_clarify 
 
sublime1-ga


Additional information may be found from an exploration of
the links resulting from the Google searches outlined below.

Productive searches done, via Google:

"recover files" "who deleted the file" "Server 2003"
://www.google.com/search?q=%22recover+files%22+%22who+deleted+the+file%22+%22Server+2003%22

"Undelete 5" "Executive Software"
://www.google.com/search?q=%22Undelete+5%22+%22Executive+Software%22