Hi,

We have a handful of students who have access to one of the computers,
(each with their username/password), a folder was created in a common
public 'student' folder and we need to find out who was logged in at the
time the folder was created.

Is there a way of knowing with certainty, who the student who created
the folder was?
There is a very small possibility that although one student was logged
on at a time, another student could have accessed the shared 'student'
folder remotely and created the sub-folder.

Many thanks

Simon

Simon wrote:

> Hi,
>
> We have a handful of students who have access to one of the computers,
> (each with their username/password), a folder was created in a common
> public 'student' folder and we need to find out who was logged in at the
> time the folder was created.
>
> Is there a way of knowing with certainty, who the student who created
> the folder was?
> There is a very small possibility that although one student was logged
> on at a time, another student could have accessed the shared 'student'
> folder remotely and created the sub-folder.

It depends on how you set up your domain or if you even have a domain and
how you set up the student computers. If each student has a unique user name
and you previously set up auditing on the server, then yes you can. Of
course, you can't know if someone else logged in using another person's
computer. And naturally if you didn't already have some sort of server
monitoring in place you're out of luck.

We ran into this issue at my friend/partner's school with the laptop program
users. The kids are in 7th/8th grade so you can imagine the problems.
Frankly, even assigning unique user accounts last year (in previous years
all users were the generic "student") wasn't completely satisfactory for
tracking down malfeasants. This year my friend has installed eBlaster from
SpectorSoft on all the laptops. While this was expensive, it will meet my
friend's needs perfectly. I don't know if you want to go to that extent.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
http://www.elephantboycomputers.com/#FAQ

How about looking at the folder's security settings to see who the owner is?

John

Simon wrote:
> Hi,
>
> We have a handful of students who have access to one of the computers,
> (each with their username/password), a folder was created in a common
> public 'student' folder and we need to find out who was logged in at the
> time the folder was created.
>
> Is there a way of knowing with certainty, who the student who created
> the folder was?
> There is a very small possibility that although one student was logged
> on at a time, another student could have accessed the shared 'student'
> folder remotely and created the sub-folder.
>
> Many thanks
>
> Simon

John John - MVP wrote:
> How about looking at the folder's security settings to see who the owner
> is?
>

I did that, but the student claimed that it was not created by him.
(none of the students have Admin rights on the machine).

Simon

Well then, someone else sitting at his station created the folder, or
someone logged in with his credentials at another machine did!

John

Simon wrote:
> John John - MVP wrote:
>> How about looking at the folder's security settings to see who the
>> owner is?
>>
>
> I did that, but the student claimed that it was not created by him.
> (none of the students have Admin rights on the machine).
>
> Simon

John John - MVP wrote:
> Well then, someone else sitting at his station created the folder, or
> someone logged in with his credentials at another machine did!
>
> John
>

I just wanted to make sure that his name couldn't miraculously appear as
the owner by some other means.

Thanks

Simon

Simon wrote:
> John John - MVP wrote:
>> Well then, someone else sitting at his station created the folder, or
>> someone logged in with his credentials at another machine did!
>>
>> John
>>
>
> I just wanted to make sure that his name couldn't miraculously appear as
> the owner by some other means.

Only someone with administrative privileges can change the owner after
the fact.

John