Who created a folder?

[Simon]

Hi,

We have a handful of students who have access to one of the computers,
(each with their username/password), a folder was created in a common
public 'student' folder and we need to find out who was logged in at the
time the folder was created.

Is there a way of knowing with certainty, who the student who created
the folder was?
There is a very small possibility that although one student was logged
on at a time, another student could have accessed the shared 'student'
folder remotely and created the sub-folder.

Many thanks

Simon

 

[Malke]

Hi,

We have a handful of students who have access to one of the computers,
(each with their username/password), a folder was created in a common
public 'student' folder and we need to find out who was logged in at the
time the folder was created.

Is there a way of knowing with certainty, who the student who created
the folder was?
There is a very small possibility that although one student was logged
on at a time, another student could have accessed the shared 'student'
folder remotely and created the sub-folder.

It depends on how you set up your domain or if you even have a domain and
how you set up the student computers. If each student has a unique user name
and you previously set up auditing on the server, then yes you can. Of
course, you can't know if someone else logged in using another person's
computer. And naturally if you didn't already have some sort of server
monitoring in place you're out of luck.

We ran into this issue at my friend/partner's school with the laptop program
users. The kids are in 7th/8th grade so you can imagine the problems.
Frankly, even assigning unique user accounts last year (in previous years
all users were the generic "student") wasn't completely satisfactory for
tracking down malfeasants. This year my friend has installed eBlaster from
SpectorSoft on all the laptops. While this was expensive, it will meet my
friend's needs perfectly. I don't know if you want to go to that extent.

Malke

 

[John John - MVP]

How about looking at the folder's security settings to see who the owner is?

John

 

[Simon]

How about looking at the folder's security settings to see who the owner
is?

I did that, but the student claimed that it was not created by him.
(none of the students have Admin rights on the machine).

Simon

 

[John John - MVP]

Well then, someone else sitting at his station created the folder, or
someone logged in with his credentials at another machine did!

John

 

[Simon]

Well then, someone else sitting at his station created the folder, or
someone logged in with his credentials at another machine did!

John

I just wanted to make sure that his name couldn't miraculously appear as
the owner by some other means.

Thanks

Simon

 

[John John - MVP]

I just wanted to make sure that his name couldn't miraculously appear as
the owner by some other means.

Only someone with administrative privileges can change the owner after
the fact.

John