watch folder

[RedLars]

Hi,

Using WinXP SP3 setup with a share folder.

How can I monitor all file activity that occurs in this folder and who
(computer and process) performed the action?

I am mainly interested in knowing about creating files\folder,
modifying files\folder and deleting files\folders.

Appreciate any input.

 

[BillW50]

In
RedLars wrote on Thu, 26 Apr 2012 05:03:24 -0700 (PDT):

Hi,

Using WinXP SP3 setup with a share folder.

How can I monitor all file activity that occurs in this folder and who
(computer and process) performed the action?

I am mainly interested in knowing about creating files\folder,
modifying files\folder and deleting files\folders.

Appreciate any input.

Well I know of a few utilities that will do this if used together. Not
one that does all of it though.

Moo0 FileMonitor 1.07 (free) - This will tell you what files are
created, written, read, and deleted on a given drive. It doesn't tell
you who did it though. Nor can it just watch anything less than a whole
partition that I know of. But it does sort by path, so you can scroll to
where the folder you are watching is at.

AnVir Task Manager - There are three editions of this one and one of
them is free. This one *will* tell you who did what. Although it doesn't
give a date and time for a file or folder modification. Nor does it tell
you what it was doing with the file; i.e. creating, reading, writing,
deleting, etc.

I do seem to recall there are better utilities to do what you want to
do, can't think of them now.

 

[BillW50]

In

In
RedLars wrote on Thu, 26 Apr 2012 05:03:24 -0700 (PDT):

Well I know of a few utilities that will do this if used together. Not
one that does all of it though.

Moo0 FileMonitor 1.07 (free) - This will tell you what files are
created, written, read, and deleted on a given drive. It doesn't tell
you who did it though. Nor can it just watch anything less than a
whole partition that I know of. But it does sort by path, so you can
scroll to where the folder you are watching is at.

AnVir Task Manager - There are three editions of this one and one of
them is free. This one *will* tell you who did what. Although it
doesn't give a date and time for a file or folder modification. Nor
does it tell you what it was doing with the file; i.e. creating,
reading, writing, deleting, etc.

I do seem to recall there are better utilities to do what you want to
do, can't think of them now.

I also have Sysinternals Process Monitor. And that probably will do it
all for you. But there is a bit of a learning curve with that one.

http://technet.microsoft.com/en-us/sysinternals/bb896645