RE: A way to find out what someone used my computer for?

From: WT (anonymous_at_discussions.microsoft.com)
Date: 04/05/04 

Date: Mon, 5 Apr 2004 12:51:05 -0700

for the future, you could setup 'auditing' on files, folders and objects....assuming that your disks are NTFS, but that won't tell you what happened in the past!

Relevant Pages

  • Re: Audit - Summary of the folders and files
    ... over all of the storage and examine the NTFS Audit SACL. ... that auditing setting propagate to all substructure (be careful here so ... We want to know how to retrieve the list of the files and folders audited ...
    (microsoft.public.windows.server.security)
  • RE: Incorrect Disk Space reading
    ... How to Locate and Correct Disk Space Problems on NTFS Volumes in Windows XP ... cannot find the cause or locate the folders and files that cause the NTFS ... The Cluster Size Is Too Large ...
    (microsoft.public.windowsxp.hardware)
  • My results of trying 9.0 live evaluation
    ... The first time I booted from the 9.0 CD, it attempted to install my Epson ... disconnected and it completed the boot operation reasonably fast. ... storage and ram disks. ... any of them said that the NTFS kernal mode was not installed. ...
    (alt.os.linux.suse)
  • Re: Locking Computer Software
    ... > and you have your disks formatted using NTFS, ... DOS boot disks that can read ... This is hardly "very secure". ...
    (alt.computer.security)
  • Re: Permissions for shared folders
    ... bottom folders, since the propagation occurrs. ... Be aware of such of tricky securty settings.. ... >You would enable Auditing to track file access. ... >must both enable logging in the overall computer policy ...
    (microsoft.public.win2000.security)