Like a lot of offices we have a few public shares for different teams to save their data. Today I helped someone restore some folders from a shadow copy that had been deleted sometime last week. While I had the shadow copies (and backups elsewhere), I couldn't answer the obvious first question.
"Who deleted the files?"
We're running Windows 2003 server, everyone has active directory accounts.
Do you have object access auditing enabled and did you have auditing configured for the files\folders that were deleted? If the answers are no, then you won't be able to find out who deleted the content in question.