Searching for Changes to File Using EventViewer

[Will]

I want to see a history of which userids changed a file, and at what times
of day. I find using the EventViewer for this purpose (assuming you
have auditing of the file in question turned on) incredibly tedious. Is
there some utility that would make it easy to get a change history of
specific files, digging through EventViewer Security log for the details?

 

[Jerold Schulman]

I want to see a history of which userids changed a file, and at what times
of day. I find using the EventViewer for this purpose (assuming you
have auditing of the file in question turned on) incredibly tedious. Is
there some utility that would make it easy to get a change history of
specific files, digging through EventViewer Security log for the details?

See tip 4528 » Freeware PsLogList dumps local and remote event logs.
in the 'Tips & Tricks' at http://www.jsifaq.com

You can then use notepad, or write a bat or vbs script.