Audit trail or log when accessing a file
- From: "Gary Richtmeyer" <glricht-RemoveMe-5@xxxxxxxxxxxx>
- Date: Thu, 31 May 2007 14:35:14 -0400
I have a client with 8 Win XP PCs on a small peer network (a workgroup, not
a domain). One PC is a file server which holds the business-related files
that everybody in the office is allowed to access (read-only).
Yesterday, one of his employees quit and the client is wondering if that
employee viewed (and maybe copied) any of the files containing customer
lists. Even though everybody has permission to view the files, the client
wants to know if there's any way to know _which_ employees accessed _which_
files and _when_.
I'm not aware of any Win XP audit trail or log that would track
cross-network file access like this, at least nothing that's currently
within XP that we could query for accesses in the past. Assuming there
isn't, anyone familiar with such a tool for future use?
p.s. NTFS has a "last-accessed" date field, but it doesn't have who/when
data and it doesn't have history.
-- Gary Richtmeyer, Tampa, FL
.
- Prev by Date: Re: Please help with Microsoft windows recovery console
- Next by Date: Entire Network didn't appear in my network places
- Previous by thread: new hardware found
- Next by thread: Entire Network didn't appear in my network places
- Index(es):
Relevant Pages
|
|
