XP: Finding who copied what, where, and at what time?

  • Thread starter Thread starter deostroll
  • Start date Start date
D

deostroll

There are various users on my system. I am the administrator. Is there
a possibility to find out who copied files from a cdrom to the hard
drive, the details of the file that was copied, the destiniatioin to
which it was copied, etc...? Just wondering if there are system logs
pertaining to this....?

--deostroll
 
deostroll said:
There are various users on my system. I am the administrator. Is there
a possibility to find out who copied files from a cdrom to the hard
drive, the details of the file that was copied, the destiniatioin to
which it was copied, etc...? Just wondering if there are system logs
pertaining to this....?
Click to expand...

There are third party applications that do this. Windows XP doesn't do it
out of the box beyond showing the account under which the copy was made as
the owner of the file.
 
So how do we go about builiding/developing something for windows that
does the above?
-deostroll
 
deostroll said:
So how do we go about builiding/developing something for windows that
does the above?
-deostroll
Click to expand...

Have you reviewed "Auditing" in Windows Help and Support?
 
So how do we go about builiding/developing something for windows that
does the above?

Why reinvent the wheel? There are a few products that do what you want.
One that we use here is 'Sanctuary Device Control' from SecureWave. It
restrict reading and writing on a device by device basis and logs everything
copied on and off the system.
 
M.I.5¾ said:
So how do we go about builiding/developing something for windows that
does the above?

Why reinvent the wheel? There are a few products that do what you want.
One that we use here is 'Sanctuary Device Control' from SecureWave. It
restrict reading and writing on a device by device basis and logs
everything copied on and off the system.
Click to expand...

Since no one answered his question clearly, he wants to know how to do it.

I imagine he may be able to do what he wants using the security audit tools
in XP pro.

I know you can restrict access to removeable media, but I'm not sure about
the file loging bit.
 
Onsokumaru said:
Since no one answered his question clearly, he wants to know how to do it.

I imagine he may be able to do what he wants using the security audit
tools in XP pro.

I know you can restrict access to removeable media, but I'm not sure about
the file loging bit.
Click to expand...

Your main point stands unchallenged. Nobody has still answered his question
clearly.
 
Back
Top