Re: how to log access to important files

bob.elliott@xxxxxxxxxxxx wrote:
I'm running Windows 2000, due to security reasons I need to log
some file operations. Say, I need to know all file operation (open,
modify, delete) for folder D:\Docs. Is there any way to do so?

Windows 2000 supports Auditing which can be defined on almost any
object, but this would fill up your Security Event Log and therefore
should be limited to important objects only.

So you may take a look at Filemon from Sysinternals. It has an option to
link in at boot process and then keeps on silently logging everything
until you start the program again.
.

Relevant Pages

  • Re: Having trouble with file modes
    ... file in binary mode ... Ofen when doing file operations you might prefer to read the file to ... modify, make changes in memory then save back in an other file, so you ...
    (comp.lang.python)
  • Re: how to log access to important files
    ... file operations. ... Say, I need to know all file operation (open, modify, ... delete) for folder D:\Docs. ... Windows 2000 supports Auditing which can be defined on almost any ...
    (comp.security.misc)
  • log file operations
    ... I'm running Windows 2000, due to security reasons I need to log some ... file operations. ... Say, I need to know all file operation (open, modify, ...
    (microsoft.public.win2000.general)
  • how to log access to important files
    ... I'm running Windows 2000, due to security reasons I need to log some ... file operations. ... Say, I need to know all file operation (open, modify, ...
    (comp.security.misc)
  • Re: read and write permission does not delete word ~ files
    ... Ah yes on a file the only diff is delete, on a folder it is delete and deleted ... Based on how Windows apps tend to modify files if you can write and you can ... Joe Richards Microsoft MVP Windows Server Directory Services ... >>In the advanced tab you can specify delete permission instead of giving ...
    (microsoft.public.windows.server.security)