Link to home
Start Free TrialLog in
Avatar of vayoha
vayoha

asked on

How do I audit the file creation in windows 2000?

Hi!

I would like to audit certain files to see when and which process created these files.  Is there any way I could accomplish this?

thanks
duc.
Avatar of BadDoggie
BadDoggie

Windows doesn't have any native audit capability but you could install DiskMon from SysInternals (http://www.sysinternals.com/ntw2k/freeware/diskmon.shtml).

It's free. It also does a lot more than you want, but it has filtering and you could find the info you're looking for. With a bit of scripting, you could even prepare some reports from the raw data. I use it all the time.
ASKER CERTIFIED SOLUTION
Avatar of dbacalja
dbacalja

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of vayoha

ASKER

Great tips dbacalja.  

thanks for showing a good utility as well Baddoggie.  

really appreciate it.