Tracking common XP activities

[Mark]

Does Windows XP Pro track common activities like copying, renaming and
deleting files? I ask that because I noticed that the "Manage My Computer"
area has an Event Viewer that appears to be the place where something like
this might be available.

If these types of activity can't be tracked in the Event Viewer, where or
how can these activities be tracked? If not in Windows XP at all, are there
third party products that can be installed to do so?

Thanks!

 

[Carey Frisch [MVP]]

HOW TO: Audit User Access of Files, Folders, and Printers in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;310399&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

------------------------------------------------------------------------------------------


| Does Windows XP Pro track common activities like copying, renaming and
| deleting files? I ask that because I noticed that the "Manage My Computer"
| area has an Event Viewer that appears to be the place where something like
| this might be available.
|
| If these types of activity can't be tracked in the Event Viewer, where or
| how can these activities be tracked? If not in Windows XP at all, are there
| third party products that can be installed to do so?
|
| Thanks!
|

 

[Mark]

Carey,

Thank you!

Your solution is perfect if I want to track specific file/folder activity to
a specific user, etc. Last few questions:

1) Apparently this audit feature has to be specifically set up by the
administrator ... is there any other methodology in Windows XP that tracks
this sort of activity without specifically noting the parameters?

2) Is it possible to track an entire hard drive versus just a specific
folder?

Thanks,
Mark

 

[Mark]

Even though Carey's solution will solve future problems, it may be too late
for my immediate situation.

I was hoping that Windows XP automatically tracked such activities without
setting up specific audit policies (is my terminology correct?) geared
toward specific files/folders/printers/users. That is, I was hoping that
Windows XP tracked such activities, as a default, "right out of the box" ...
either through the event viewer or in another place.

With that said, is my assumption correct that the only way to track such
information is by using your solution?

Thanks,
Mark