XP Remote Detection of Removeable Media Write

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I am looking for hook that I can pull up remotely on WindowsXP desktops
that indicates that a file has been written to a CD, USB or removeable
media. I see some info in the event log when there is a file queued to
write to CD (7035 IMAPI CD-Burn start/stop) and I can pick up a USB
removeable media under NTMSmgr.msc, but I just can't seem to find a
good indicator that a file has been written.

Is anyone playing in this area? Or does anyone have any suggestion for
places I can look. I preferr not to have to turn on audit or run a
background script on the machines... It would really be nice if we
could figure a way to push it to the system.evt to pull reports.

TIA,
SG

.

Relevant Pages

  • Re: unmounted an external harddrive
    ... way of ensuring no data loss if you were to physically pull out the USB plug ...
    (microsoft.public.windowsxp.general)
  • Re: URGENT - Document turned into code!
    ... You should never work with a document on removeable media such as a USB ... Doug Robbins - Word MVP ... Word 2000 then proceeded to turn my essay ...
    (microsoft.public.word.docmanagement)
  • Re: [SLE] speed in Pen drive access
    ... Wait until it umounts, then pull it off the drive. ... KBytes per sec on a USB 1.1 version of my "pen drive". ...
    (SuSE)
  • Re: Windows XP will not let me eject my usb device
    ... I guess this just lets me pull the device off without ... issue of why XP is refusing to eject the usb device. ... support SATA drives only? ... >>> if you see light flashing, ...
    (microsoft.public.windowsxp.hardware)
  • Re: XP Remote Detection of Removeable Media Write
    ... I see some info in the event log when there ... I can pick up a USB removeable media under NTMSmgr.msc, ... external media or email them elsewhere? ...
    (microsoft.public.windowsxp.configuration_manage)