Re: Windows History

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 01/29/05 

Date: Fri, 28 Jan 2005 20:23:02 -0600

I still am not quite sure what you want? Do you want to know what files the
operating system is using at a particular point in time, the files that an
application is using? Try using "msinfo32" in the run box to see if that
will help, particularly "software environment" . There are some free tools
from SysInternals such as Process Explorer and filemon. Process Explorer
will show what files are being used by a process and filemon will show file
use in real time. You may also want to search their other utilities to see
if any do what you want. --- Steve

http://www.sysinternals.com/ntw2k/freeware/procexp.shtml -- Process
Explorer.

"MSM" <MSM@discussions.microsoft.com> wrote in message
news:BFD184BC-42EC-4E78-91F0-FF937EB7FCF1@microsoft.com...
> Hi:
>
> No not of a particular user, but the files themselves, I have them under
> the
> "Audit/Security" set up in computer mangaement, but I am not very good at
> reading the Security read outs, so I was/am hoping for something a little
> easier to use and read.
>
> Mark M.
>
> "Steven L Umbach" wrote:
>
>> Exactly what are you trying to accomplish - the files a particular user
>> accesses or what?? --- Steve
>>
>>
>> "MSM" <MSM@discussions.microsoft.com> wrote in message
>> news:4B7AC28E-031F-424C-94AC-AF20238CF97B@microsoft.com...
>> > Hi All:
>> >
>> > Besides IE history, are there any other files maintianed by the OS that
>> > can
>> > be read to determine the complete accessing of the files systems that
>> > can
>> > be
>> > read. If so what are this files and are there any viewers out there
>> > taht
>> > can
>> > read them?
>> > --
>> > Thank you for you help
>> > Mark M
>>
>>
>>

Relevant Pages

  • Re: Need help: Port 445 flood
    ... with the port use. ... Process Explorer will give a lot more detail of processes if you ... Autoruns will show much more detail what ... Filemon will display live ...
    (microsoft.public.windows.server.security)
  • Re: something downloading to hard drive constantly
    ... Download SysInternal's FileMon. ... should help run down the "Culprit". ... They also have a Process Explorer ... FileMon can be back traced, ...
    (microsoft.public.windowsxp.general)
  • Re: Periodic Disc I/O at approx 1 sec
    ... Dan, ... Filemon will show what file is being accessed, and what process is accessing it. ... If it's NOT a file access, try Regmon and Process Explorer, also ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Remember your password check box greyed out
    ... Get Filemon, Process Explorer, and Regmon ... Enter that PID as a filter into Filemon and Regmon. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Systemwiederherstellung deaktivieren
    ... Eigentlich müsste sich jetzt jemand finden, der das auseinandernimmt: Analyse, welches Programm schreibt welche Dateien... ... Process Explorer und FileMon von Sysinternals... ...
    (microsoft.public.de.german.windowsxp.sonstiges)