XP: Finding who copied what, where, and at what time?

[deostroll]

There are various users on my system. I am the administrator. Is there
a possibility to find out who copied files from a cdrom to the hard
drive, the details of the file that was copied, the destiniatioin to
which it was copied, etc...? Just wondering if there are system logs
pertaining to this....?

--deostroll

 

[M.I.5¾]

There are various users on my system. I am the administrator. Is there
a possibility to find out who copied files from a cdrom to the hard
drive, the details of the file that was copied, the destiniatioin to
which it was copied, etc...? Just wondering if there are system logs
pertaining to this....?

There are third party applications that do this. Windows XP doesn't do it
out of the box beyond showing the account under which the copy was made as
the owner of the file.

 

[deostroll]

So how do we go about builiding/developing something for windows that
does the above?
-deostroll

 

[Bob I]

So how do we go about builiding/developing something for windows that
does the above?
-deostroll

Have you reviewed "Auditing" in Windows Help and Support?

 

[M.I.5¾]

So how do we go about builiding/developing something for windows that
does the above?

Why reinvent the wheel? There are a few products that do what you want.
One that we use here is 'Sanctuary Device Control' from SecureWave. It
restrict reading and writing on a device by device basis and logs everything
copied on and off the system.

 

[Onsokumaru]

So how do we go about builiding/developing something for windows that
does the above?

Why reinvent the wheel? There are a few products that do what you want.
One that we use here is 'Sanctuary Device Control' from SecureWave. It
restrict reading and writing on a device by device basis and logs
everything copied on and off the system.

Since no one answered his question clearly, he wants to know how to do it.

I imagine he may be able to do what he wants using the security audit tools
in XP pro.

I know you can restrict access to removeable media, but I'm not sure about
the file loging bit.

 

[Walter Wall]

Since no one answered his question clearly, he wants to know how to do it.

I imagine he may be able to do what he wants using the security audit
tools in XP pro.

I know you can restrict access to removeable media, but I'm not sure about
the file loging bit.

Your main point stands unchallenged. Nobody has still answered his question
clearly.