Re: monitoring removeable storage

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 08/14/05 

Date: Sat, 13 Aug 2005 22:09:49 -0500

You can enable auditing of object access and then audit folder writes and
reads [or any permission] of files on the computers fixed drives but I have
never heard of a way to do that for removable media. For situations that may
require it you may want to use computers that have their USB and other ports
disabled in the computers cmos or even look at a computer case that has
locked access to ports and drives. --- Steve

"Chris ONeill" <chris.oneill@strathclydehomes.com> wrote in message
news:11f6su9q43eh129@corp.supernews.com...
> Hello,
>
> I wonder if anyone can help...
>
> I would like to be able to monitor (log) which files our network users are
> copying to removeable media (ie, cd, dvd, and usb devices).
>
> I know that there is software out there (we have been looking at GFI Lan
> Guard) that will help me control access to removeable media but we really
> want to be able to monitor, for the users that have access, which filles
> are being taken from and introduced to our systems.#
>
> Does anyone know of any software, commercial or non that will enable us to
> do this.
>

Relevant Pages

  • Re: log file how to?
    ... You can enable auditing on your computers however for what you would want to do you ... would need to audit everything and then enable auditing on all folders on the ... events in the security log and use Event Comb to scan the logs of multiple computers. ...
    (microsoft.public.win2000.networking)
  • Re: log files
    ... For domain controllers enable auditing of account logon events in Domain ... Controller Security policy and you will then see when users are logging onto ... For computers other than domain controllers enable ...
    (microsoft.public.security)
  • Re: users logon and Logoff Auditing
    ... You will need to enable auditing of logon events on their computers and then ... monitor that when user logs on and logs off and how long he/she remains. ...
    (microsoft.public.win2000.security)
  • Re: How to audit who adds computers to domain
    ... start browsing their computers. ... > Enable auditing of acount managment events in your Domain Controller ... > configured for only domain admins group as by default it is authenicated ...
    (microsoft.public.win2000.networking)
Quantcast