Drive and file access time stamps

[Bob]

Is there a way to look at a time stamp log of the access
date/time of my c drive, as well as my network personal
share drive. I'd also like to look at a date/time stamp
log that identifies access to my files on my c drive and
network personal share drive. The problem with the method
I've tried (right click on file, select properties) is
that the last access date/time immediately changes to the
current date/time.

 

[jj]

Open a command prompt (start - run: cmd <enter>), change dir to the location
of your files, and type the command:

dir /TA

Or, to dump the file list to a text file and open it in notepad:

dir /TA > filelist.txt
notepad filelist.txt

To see all options for the dir command:

dir /?

 

[Bob]

jj-

Thanks for your reply. Your information allows me to find
out when the last time my drive/files were accessed. Is
there a way to display a log of this access activity for
the past several days, or to specify the access activity
on 8/22/03 from 12:00 pm to present? Also, is there a way
to find out when my PC was shut down on 8/22/03?

Thanks,
Bob

 

[jj]

Yes Bob, your question was clear, and I apologize for not reading it right.

The Event Log should allow you to see when the computer was shut down and
restarted. (find it under Control Panel - Administrative Tools). Just look
for "eventlog" events in the Source column. A typical shutdown entry should
look like "The Event log service was stopped." This is valid only if the
EventLog service was not manually, or accidentally stopped before the
shutdown.

As for the file access log -- you might find of interest these links below
(WinXP Pro):
- Auditing file and folder access
http://www.microsoft.com/technet/tr...hnol/winxppro/proddocs/SAG_EVmonevents_17.asp
- To set, view, change, or remove auditing for a file or folder
http://www.microsoft.com/technet/tr...l/winxppro/proddocs/acl_audit_file_folder.asp
- Audit access to a file
http://www.lokbox.net/SecureXP/audit.asp