Dear expert
I have an important un-secured excel sheet on my desktop in the office, some body over the network copied the file to his desktop and other users opened and viewed the file, the security is not an issue as the file created to be seen by others, my important question is
How I can check who are the users or ip than has copied or opened this file, is there any log any where can tell me this information. I really hardly want to know how to do this practice, please note that the event manager is cleaned.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I am just echoing the sentiment already expressed, in that if auditing was not enabled, you will not be able to retrieve that information, as there is no mechanism in place by default, it must be explicitly enabled to provide that sort of tracking.
You can use the command line tools, netstat to view the incoming sessions, if someone is actively accessing your file, but even that is dynamically updated and no history is retained.
Hi thabash,
The name of the last person to access an Excel workbook is hidden in plain text in the raw file. The name appears in the first few lines of the files. Even if you don't save the file, this piece of information is still updated. It can be viewed using a text editor like Notepad.exe
Hoping to be helpful,
Brad
Dear Zorvel
i opened the workbook in the notepad, see down ( where exactly i can find the name)
ذدà،±&
Awari Account Paid 0145
Pending Awari Pending to Pay Awari Account all paid up to hereے ¢ ï Y c c
© حةہ - A N d
d ü©ٌزMbP?_ * + ‚ € % ے پ ء ƒ „ M H P L a s e r J e t 4 ـ 4Cï€ ڑ 4d X X A 4 ےےے®
’ - ے @ ¤ @ ï @
‎
¾ ‎
!
" ¾ ¾
# $ ‎
‎
‎
‎
‎
‎
½ `¬@ €†@ €†@ * ے D ہ½
î¯@ à¥@ ½ 2@ y@ y@ ے ¼ ) ! L ‏ہ½
<°@ ”@ ‎
½ ہb@ ہb@ ے ½
>°@ ژ@ ½ <@ `s@ `s@ ے ½
Q°@ ژ@ ½ 8@ گ•@ گ•@ ے ½
œ@ ش§@ ‎
½ @o@ @o@ ے ¾
½ 8®@ à¥@ à¥@ ے ¾
½
:®@ @¯@
@¯@ ے ¾
½ >®@ گ@ گ@
ے ¾
½ v®@ ˆک@ ˆک@ ے ¾
½
–±@ @
@ ے ¾
½ ،±@ pœ@ pœ@
ے ‎
# ءء@ ً ّ‎
%
ہ ہˆ ½ §±@ 8ˆ@ 8ˆ@ ے ½ ھ±@ ¼–@ ¼–@ ے ½ ¬±@ ژ@ ژ@ ے ½ ±@ n@ n@ ے ½ گt@ €†@ €†@ ے ½ ·±@ ~@ ~@ ے ½ a@ Œ@ Œ@ ے ½ ‏¯@ …@ …@ ے ½ ن¯@ •@ •@ ے ½ è¯@ @o@ @o@ ے ½ ى¯@ @¯@ @¯@ ے ‎
½ î¯@ à¥@ à¥@ ‎
½ r@ r@ ے ½ ئ±@ °چ@ °چ@ ے ½ <°@ ”@ ”@ ½ >°@ ژ@ ژ@ ½ Q°@ ژ@ ژ@ × D ¥
l6 T Q d Y Q Q Q I I I I I p ; ; ; ; ; ; ; ; ; ; I " C ; " " ! " # $ % & ' ( ) * + , ½ œ@ ش§@ ش§@ ½ ! ! ے ½ " " ! ے ½ # # " ے ½ $ $ # ے ½ % % $ ے ½ & & % ے ½ ' ' & ے ‎
( ½ ( ( ' ے ½ ) ) ( ‏ ‎
* # * ہفâ@ * ے
% ) ہہ # * ءء@ * ے
% ) ہہ # * غـ@ ے
% ) ہہ , × خ ً " ; ; ; ; ; ; ; C ; ƒ > ¶ @ ه
ï 7 g g ےےے
© حةہ ¦
d ü©ٌزMbP?_ * + ‚ € % ے پ ء ƒ „ ، " ے ے à? à?ہU > ¶ @ ï 7
© حةہ
d ü©ٌزMbP?_ * + ‚ € % ے پ ء ƒ „ ، " ے à? à?ہU > ¶ @ ï 7
‏ے à…ںٍùOh«‘ +'³ظ0 ¬ H P \ h € Œ
ک ¤ è IT IT Microsoft Excel @ €‚رpt<ا@ €ہي*ے&#
œ إ è Electric House Est. « Sheet1 Sheet2 Sheet3 Worksheets
‏ےے®
Hi thabash,
Could you not have a separate file (I have called it WhoLooked), which will automatically open, put the UserName and date into it whenever the main file is opened and then close again. Screen Updating is set to false so the User willl not see it opening and closing. It will keep a record of the Date and UserNames in column IV of sheet1 that you can view anytime.
This code, put in the Workbook_Open event of the main file, should give you that info.
Private Sub Workbook_Open()
Dim cUser As String
cUser = Environ("UserName")
Sheet1.Range("IV1").Value = cUser
Application.ScreenUpdating
Workbooks.Open Filename:= _
"C:\Documents and Settings\Registered User\Desktop\WhoLooked.xls
ActiveWorkbook.Sheets("She
ActiveWorkbook.Sheets("She
Application.ScreenUpdating
ActiveWorkbook.Close savechanges:=True
End Sub
Bill
Here is some VB code that reads the last accessed user name from a workbook file:
Public Sub Test()
Dim FilePath As String
FilePath = Application.GetOpenFilenam
If FilePath = "False" Then Exit Sub
MsgBox GetLastAccessUserName(File
End Sub
Public Function GetLastAccessUserName( _
ByVal WorkbookPath As String _
) As String
Dim FileNumber As Long
Dim FileData As String
Dim Position As Long
FileNumber = FreeFile
Open WorkbookPath For Binary Access Read As FileNumber
FileData = StrConv(InputB(10000, FileNumber), vbUnicode)
Close FileNumber
Position = InStr(FileData, Chr(193) & Chr(0) & Chr(2) & Chr(0) & Chr(0) & Chr(0) & Chr(226) & Chr(0) & Chr(0) & Chr(0) & "\" & Chr(0) & "p")
If Position > 0 Then GetLastAccessUserName = Mid(FileData, Position + 17, Asc(Mid(FileData, Position + 14, 1)))
End Function
If you run it on a file you have opened you will get "IT" as that is what is currently set in Excel's user name property in the Options dialog box.
Kevin
Here are the first few lines (using Notepad.exe) of two Excel files. The first one was last accessed by me (Brad Yundt). The second one was last accessed by J. Rosink.
ÐÏࡱá > þÿ þÿÿÿ ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
' , ! " # $ % & ( þÿÿÿ) * + - 0 . / þÿÿÿþÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = þÿÿÿ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d þÿÿÿf g h i j k l m n o þÿÿÿq þÿÿÿs t u v w x y z { | } ~ € © ÍÉÀ á °Á â \ p
Brad Yundt B °a À = Ó º ThisWorkbookœ ¯ ¼ = Ð,k:þ 8 X@ " · Ú 1 È ÿ ¸A r i a l 1 È ÿ ¸A r i a l 1 È ÿ ¸A r i a l 1 È ÿ ¸A r i a l 1 ÿ ¸A r i a l "$"#,##0_);\("$"#,##0\) !
ÐÏࡱá > þÿ 9 þÿÿÿ þÿÿÿ 8 ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
à @ À à H À “ €ÿ“ €ÿ“ €ÿ“ €ÿ“ € ÿ“ €ÿ` … È Testmaat-Determinant… —> Chart2Œ ® ÿÿÿÿÁ Á "¾ ü ! Testmaat determinantÿ
„ c c &
µ ÍÉÀ 9 î! H6 &>
d ü©ñÒMbP?_ * + ‚ € % ÿ Á ƒ „ M b H P P h o t o s m a r t 3 1 0 0 s e r i e s Ü „Cÿ€ ê
od X X L e t t e r ÿÿÿÿ DINU" 4Pf
ÿ V !
Business Accounts
Answer for Membership
by: sirbountyPosted on 2007-02-04 at 13:41:41ID: 18464479
http://support.microsoft.c
Once it's turned on, right-click your file, choose properties, from the security tab, click advanced and enable auditing for 'everyone' for that specific file. Then you will have that information in the security logs of event viewer.
There's no way to determine who accessed the file before this is enabled, however...