PC Review


Reply
Thread Tools Rate Thread

Re: Auditing files for changes and/or deletion

 
 
Mark-Allen
Guest
Posts: n/a
 
      27th Jul 2004
I think but am not sure that editing a file is really three steps; one is a creation of a new file of only changes and then a creation of a new file with changes, and then deleting the old file. I read this somewhere but it may only apply to Word and Excel.

Word does create a tmp file to house changes. You can see that in the Explorer.

--
Mark-Allen Perry
ALPHA Systems, Switzerland
mark-allen AT mvps DOT org

"Anthony" <(E-Mail Removed)> wrote in message newsC25B56E-3105-49F3-9E7D-(E-Mail Removed)...
I have set up auditing for a directory and we are auditing a handful of word and excel files. We a user makes a change to a file under event viewer it shows as Event ID 560 - Deletion. Is that right? Shouldn't it reflect a different status?

When deleting a file it shows are deletion so that part of auditing is working. Any suggestions?

Thanks.

Anthony
 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Auditing .net generated files RM Microsoft ASP .NET 0 6th Oct 2009 03:49 PM
Files for deletion =?Utf-8?B?RGFkZGlv?= Windows XP General 3 18th Mar 2007 11:54 PM
auditing files on windows xp warren Windows XP Security 3 5th Jan 2005 05:24 PM
Auditing tab is not visible for a file or a catalog Auditing Kandeeban Microsoft Windows 2000 Active Directory 0 28th Apr 2004 12:13 PM
Auditing File Deletion Joel T. Microsoft Windows 2000 Security 1 7th Nov 2003 06:28 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 12:50 PM.