Question

[Liu]

Hi I'm wondering if anyone could tell me how to check who
last modified a file in windows 2000.

I tried to look under properties->securities, it only
gives the owner of the file. Maybe I need to use a command
prompt?

Thanks.

 

[Ian Gledhill]

Hi Liu,

You can only get this information if you have auditing enabled - go to the
file/folder, security\advanced\auditing.

kind regards
Ian

 

[Sergio Dutra [MS]]

You need to go to the security event log to view who last accessed the file.
The ownership of the file does not change by a different - but allowed -
user modifying it.

 

[Liu]

I went to Computer management, and checked the security
log, but it doesn't show any info about file change or
anything.

I must be dumb, am I looking into the wrong place again?

 

[Mike Danseglio \(MSFT\)]

I'm not sure what steps you've followed or not, but there are a number of
steps and its real easy to miss one. I recommend you take a look at the KB
article http://support.microsoft.com/?kbid=300549 and ensure you're
following it exactly. This should work without a doubt.

--

-Mike Danseglio
Microsoft Corporation

* This posting is provided "AS IS" with no warranties, and confers no
rights.
* Please note I cannot respond to email questions. Please use these
newsgroups.