What files have been accessed?

  • Thread starter Thread starter Lisa
  • Start date Start date
L

Lisa

Is there any way to see what files and/or folders have
been accessed after someone else uses my computer? I'm
sure there's a log somewhere, I'm just not sure where!
Thanks for your help!
 
Search the hd by date, that will say what and when but not
who. You can even specify the time as well as the day.
 
Lisa,

You'll need to turn on the auditing function of Windows XP.

To do this, please note:

Step 1) Go to Windows Explorer, and then right mouse click on your C:\ drive

Step 2) Under "Local Disk" C:\ Properties, click on the "Security" tab

Step 3) Under the "Security" tab, click on the "Advanced" button

Step 4) Under "Advanced Security Settings for Local Disk C:\" select the "Auditing" tab

Step 5) Under the "Auditing" tab, click on the "Add" button

Step 6) When the "Select User or Group" dialog appears, click on the "Locations" button

Step 7) You'll then need to determine whether you want to audit local or domain-level user groups

Step 8) After this, there are a host of attributes, such as read, write, change, success, or fail that can be enabled.

Step 9) Depending on the size of your organziation, this may take some time to setup.

Step 10) After you've setup the auditing parameters to your preferences, all audited entries will appear in the "Security"
log, which can be accessed via the Computer Management snap-in on your PC via Control Panel, or alternatively
by right mouse clicking on My Computer, and then by selecting "Manage" from the shortcut menu.

Tip: If you are simply wanting to secure certain files, you may want to considering keeping them in a single folder,
and then apply NTFS security permissions to that folder. Don't forget to assign your account "Full Control" to
that folder, and then deny access to all other user accounts of staff that use your PC. You can also create a
folder on your server, and lock it down in a similiar fashion- but don't forget to assign at least "Read" access
to the backup operator account for your domain, so the your backup system can back the files up.

Hope this helps.


----- Lisa wrote: ----

Is there any way to see what files and/or folders have
been accessed after someone else uses my computer? I'm
sure there's a log somewhere, I'm just not sure where!
Thanks for your help
 
Back
Top