Re: File access logging utility

From: S. Pidgorny [MVP] (slavickp@yahoo.com)
Date: 11/28/02 

From: "S. Pidgorny [MVP]" <slavickp@yahoo.com>
Date: Thu, 28 Nov 2002 19:25:54 +1100

If using NTFS, set access audit on the files (do NOT audit entire system
drive - valuable data only). To do that, enable audit in domain or local
security policy and assign audit on files and directories. Also audit for
logon events.

If not using NTFS, convert drives to NTFS.

There are utilities that report all file system activities in real time
(FileMon from SysInternals is one that comes to mind) but you'll be
overwhelmed by the amount of info... 

--
Svyatoslav Pidgorny, MS MVP, MCSE
-= F1 is the key =-
"FireStarter" <myemail> wrote in message
news:OQ3JUDjlCHA.1912@tkmsftngp04...
> Sometimes there is quite some disk activity on my computer, while I'm not
at
> the keyboard. I'm not paranoid by nature, so let's just call it curiosity:
> does anyone know a good utility that I can use to track file access on my
> computer? That is, a program that would log what files are accessed by
what
> programs and when? A free one would be excellent, but that's not sine qua
> non.
>
> Configuration: Win XP Pro + Sygate Personal Firewall + Norton Antivirus
2002
>
>
> Thanks.
> FireStarter
>
>
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.423 / Virus Database: 238 - Release Date: 11/25/2002
>
>

Relevant Pages

  • Re: disk drive serial number
    ... its a great tool to audit your hardware ... and is also available for Linux. ... trying to audit the drives in my file server, ...
    (freebsd-questions)
  • Re: disk drive serial number
    ... }> trying to audit the drives in my file server, ... port/package) will display a disk's serial number. ... Jon Hamilton ...
    (freebsd-questions)
  • disk drive serial number
    ... trying to audit the drives in my file server, ... Jonathan Horne ...
    (freebsd-questions)
Quantcast